By the end of the year, the Cybersecurity and Infrastructure Security Agency plans to launch an automated vulnerability warning program to alert organizations that are running software with vulnerabilities being exploited by ransomware gangs, the agency’s director, Jen Easterly, said this week. Currently running in a pilot phase, the program is mandated by the Cyber Incident Reporting for Critical Infrastructure Act of 2022 and aims to reduce the number of ransomware attacks by getting the owners and operators of vulnerable systems to patch them before they can be infiltrated. Speaking at an event hosted by the Institute for Security and Technology, Easterly said the pilot is focused on reducing the prevalence of ransomware by using vulnerability scanning tools to let businesses know if they have vulnerabilities that need to be patched. CISA has issued 2,049 warnings since the pilot was launched last January. It has since expanded to include CISA’s database of known exploited vulnerabilities and common misconfigurations that can be linked to ransomware attacks.

CISA is building an automated ransomware warning program

Today on the Daily Scoop podcast from the scoop news group data stolen in the change health care attack likely included us service members and the White House encourages agencies to turn towards skilled based hiring for cyber and tech jobs.

The Daily Scoop Podcast is available every Monday-Friday afternoon.

Data Stolen in the Change Healthcare Attack Likely Included US Service Members

NASA Pushes Back on Gao’s Cyber Recommendations for Spacecraft and trade groups say CISA's incident reporting requirements go too far.

NASA Pushes Back on Gao’s Cyber Recommendations for Spacecraft

The IRS says it could run out of money to support modernization 

And, U.S. Cyber Command adds to its top brass

The Daily Scoop Podcast is available every Monday-Friday afternoon.

If you want to hear more of the latest from Washington, subscribe to The Daily Scoop 
Podcast on Apple Podcasts, Google Podcasts, and Spotify.

The IRS says it could run out of money to support modernization

With all of the critical cyberattacks executed through the software supply chain in recent years, you’re sure to have heard about SBOMs, or software bills of materials, which are essentially ingredients lists of the components that make up a piece of software. The Biden administration in its 2021 cybersecurity executive order introduced new guidance for how federal agencies should request SBOMs from vendors when purchasing software so they can better understand what it’s made of and protect against attacks down the supply chain.

The Department of Homeland Security, through its Science and Technology Directorate, is advancing federal work on SBOMs, namely through a program led by its Silicon Valley Innovation Program. In partnership with CISA, the Silicon Valley Innovation Program in 2023 awarded funding to a cohort of startups to broadly promote the use of SBOMs by developing two core software modules—a multi-format SBOM translator and a software component identifier translator—to be delivered as open-source libraries which, in turn, will be integrated with their SBOM enabled commercial products. Just recently, that cohort delivered the first of those two tools. 

Joining the Daily Scoop to discuss the need for SBOMs broadly, the cohort’s progress and what’s next are Melissa Oh, managing director of DHS’s Silicon Valley Innovation Program, and Anil John, SVIP technical manager.

Inside DHS’s work to drive wider use of SBOMs

Today on the Daily Scoop podcast from the Scoop News group, a supercomputer sandbox for testing federal AI and evaluating the nation's cyber security posture.

A Supercomputer Sandbox for Testing Federal AI

More than 60 companies join CISA’s pledge to be Secure by Design 

And, Chuck Schumer says an AI roadmap is coming soon from the Senate AI working group.

More than 60 companies join CISA’s pledge to be Secure by Design

The Pentagon launches new initiatives for a to reciprocity and digital modernization and the USDS touts its impact over the past year.

The Pentagon Launches New Initiatives for ATO Reciprocity and Digital Modernization

The US and China are Meeting This Week to Talk AI Safety

Just recently, federal agencies met some of the key requirements set forth in the Biden administration’s AI executive order that were to be completed within the first 180 days, signaling strong momentum for the federal government establishing a strong foundation of AI development and responsible use.

Nick Sinai, former U.S. deputy CTO during the Obama administration and now a senior adviser for the venture capital and private equity firm Insight Partners, which focuses on investing in software firms, joins the Daily Scoop to discuss the momentum of the AI EO, a trip he took last year to U.S. Central Command in the Middle East and what he learned there, what federal officials should be thinking about with the election coming up, and much more.

Former U.S. Deputy CTO Nick Sinai joins the podcast

NSF Funding Cuts Present a National Security Issue and new TMF investments boost agency projects and generative A I digital service delivery and accessibility.

NSF Funding Cuts Present a National Security Issue

A podcast covering the latest news & trends facing top government leaders on topics such as technology, management & workforce. Hosted by Billy Mitchell on FedScoop and released every Tuesday and Thursday afternoons.

CISA is building an automated ransomware warning program

The Daily Scoop Podcast

Related tracks