CISA

GAO Urges FDA, CISA to Revamp Medical Device Cybersecurity Agreement

December 28, 2023 - The US Government Accountability Office (GAO) released a report on medical device cybersecurity to address limitations in federal agencies’ authority, explore challenges in accessing federal support, and provide recommendations to the government on improving coordination in this space. As a result of its research, GAO recommended that the...


More Articles

CISA’s Healthcare Risk and Vulnerability Assessment Reveals Sector-Wide Improvement Areas

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) published a cybersecurity advisory based on key findings that the agency uncovered during a risk and vulnerability assessment (RVA) conducted...

CISA Releases Healthcare Cybersecurity Vulnerability Mitigation Guide

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) issued a cybersecurity vulnerability mitigation guide for the healthcare sector, stressing the importance of remediating known...

FBI, CISA Urge Immediate Action to Mitigate Rhysida Ransomware Risks

by Jill McKeon

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) released a joint...

CISA, HHS Collaborate on Healthcare Cybersecurity Toolkit

by Jill McKeon

HHS and the Cybersecurity and Infrastructure Security Agency (CISA) teamed up to release a healthcare cybersecurity toolkit consisting of key resources for managing and mitigating cyber risk in the...

CISA Maps Out Next Moves in New Cybersecurity Strategic Plan

by Jill McKeon

As cyberattacks continue to impact critical infrastructure organizations across the country, the Cybersecurity and Infrastructure Security Agency (CISA) is tackling cyber risk head-on. The...

CISA, International Partners Identify Top Routinely Exploited Vulnerabilities

by Sarai Rodriguez

A group of international cybersecurity authorities released a list of the top routinely exploited vulnerabilities of 2022, highlighting commonly overlooked vulnerabilities that organizations should...

CISA Releases Advisory On Preventing Web Application Access Control Abuse

by Jill McKeon

Insecure direct object reference (IDOR) vulnerabilities in web applications pose a threat to organizations around the world, the Cybersecurity and Infrastructure Security Agency (CISA) warned in a...

CISA Warns Critical Infrastructure of APT Actors Targeting Outlook Online

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) urged critical infrastructure entities to enhance monitoring of Microsoft Exchange Online...

CISA Warns of Truebot Activity Infecting US Networks

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), the Multi-State Information Sharing and Analysis Center (MS-ISAC), and the Canadian Centre for...

Medtronic Discloses Cybersecurity Vulnerability in Paceart Optima System

by Jill McKeon

Medtronic notified the Cybersecurity and Infrastructure Security Agency (CISA) of a cybersecurity vulnerability (CVE-2023-31222) found in its Paceart Optima System. If exploited, threat actors may be...

CISA, Partners Release LockBit Ransomware Cybersecurity Advisory

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Multi-State Information Sharing and Analysis Center (MS-ISAC), along with international...

Clop Ransomware Gang Exploiting MOVEit Cybersecurity Vulnerability

by Jill McKeon

The Cybersecurity and Infrastructure Agency (CISA) and the Federal Bureau of Investigation (FBI) issued a joint cybersecurity advisory (CSA) regarding Clop ransomware, a group that has been active...

CISA Releases Guidance For Securing Remote Access Software

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) issued a “Guide to Securing Remote Access Software” as cyber threat actors continue to leverage these tools to target victims....

CISA, Partners Revamp Ransomware Prevention Guide

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA), along with the Federal Bureau of Investigation (FBI), the National Security Agency (NSA), and the Multi-State Information Sharing and...

CISA Issues Cybersecurity Advisory Regarding BianLian Ransomware Group

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Australian Cyber Security Centre (ACSC) released a joint cybersecurity advisory (CSA)...

FDA: Critical Illumina Cybersecurity Vulnerability May Allow Threat Actors to Control Devices Remotely

by Jill McKeon

The US Food and Drug Administration (FDA) alerted healthcare providers and laboratory personnel of a cybersecurity vulnerability that impacts the Universal Copy Service (UCS) software in select...

CISA Reveals Enhanced Zero Trust Maturity Model

by Sarai Rodriguez

The Cybersecurity and Infrastructure Security Agency (CISA) unveiled the upgraded Zero Trust Maturity Model Version 2 in line with President Biden's National Cybersecurity Strategy. The new model...

CISA Looks Back On One Year of CIRCIA, Encourages Cyber Threat Sharing

by Jill McKeon

President Biden signed the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) into law one year ago, requiring the Cybersecurity and Infrastructure Security Agency (CISA) to...

CISA Issues Revised Cybersecurity Performance Goals

by Jill McKeon

The Cybersecurity and Infrastructure Security Agency (CISA) released an updated version of its Cybersecurity Performance Goals (CPGs), a set of voluntary practices that critical infrastructure...