Page 2 - Defense Faces News Today : Breaking News, Live Updates & Top Stories | Vimarsana

The Biden administration also proposes spending $1 billion for several other cybersecurity and IT initiatives, including: $200 million for the rapid hiring of security experts to work for the Office of the U.S. Chief Information Security Officer as well as the Digital Service unit in the White House; $300 million to fund additional IT projects within the GSA; $690 million for a CISA project designed to improve monitoring and incident response across federal agencies. The proposed new spending on security and IT improvements is in direct response to the SolarWinds supply chain hack, which has ...

Guarding Against Vulnerability While Microsoft issued a patch for the Zerologon flaw in August 2020, it's not clear if all the company's customers have applied it to their networks to address the vulnerability. So, Microsoft will begin enabling domain controller enforcement mode by default, according to the company alert. "This will block vulnerable connections from non-compliant devices," Microsoft says. "Domain controller enforcement mode requires that all Windows and non-Windows devices use secure [remote procedure call] with Netlogon secure channel unless customers have explicitly allowed...

Get Permission The National Security Agency has released guidance on how the Defense Department, other federal agencies and the contractors that support them should replace obsolete encryption protocols that can enable cyber intrusions. The NSA recommends that system administrators working at the Pentagon, other agencies in the U.S. government that oversee national security issues, as well as private firms and third parties that supply agencies with technology replace obsolete Transport Layer Security and Secure Sockets Layer protocols that are used to encrypt network traffic traveling betwe...

Get Permission The Cybersecurity and Infrastructure Security Agency has released an emergency directive requiring all federal organizations still running vulnerable SolarWinds Orion software to immediately update to the latest version. In an update released Wednesday, CISA says the organizations with a vulnerable version of the SolarWinds platform installed must update to version 2020.2.1HF2 by Dec. 31. "The National Security Agency has examined this version and verified that it eliminates the previously identified malicious code," CISA says. The SolarWinds hacking was initially disclosed o...

Get Permission The FBI, CISA and the ODNI are leading the U.S. government's response to the apparent cyberespionage operation that backdoored the widely used SolarWinds Orion network monitoring software. American technology giants Cisco and Intel are among the thousands of organizations that have been affected by the supply chain attack targeting software vendor SolarWinds and, by extension, its customers. The attack campaign, which was first revealed Sunday by FireEye, one of its victims, centers on the Orion network monitoring software from SolarWinds, a technology firm based in Austin, Te...