Resilience. Security. Compliance.
Resilience. Security. Compliance.
Red Teaming the New ESTA Proposal: Security Gains, Travel Friction, and the Risks We’re Not Talking About Recent proposals to expand data collection under the U.S. Visa Waiver Program (ESTA) have been discussed largely through the lenses of immigration and travel policy. But at its core, this proposal is not just about border control — […]
🔐 CISA’s May 2025 ICS Advisories: Detailed Overview 🏭 Siemens Advisories 🧹 ECOVACS Advisory ⚡ Schneider Electric Advisory 🏗️ Mitsubishi Electric Advisories
In March 2025, President Donald Trump signed an executive order titled “Achieving Efficiency Through State and Local Preparedness,” which significantly shifts cybersecurity responsibilities from the federal government to state and local authorities. This policy change has sparked widespread concern among cybersecurity experts and state officials.Yahoo+6Inside Government Contracts+6The White House+6 Key Elements of the Executive Order […]
Why the CVE Program Matters — and Why CISA Saving It Is Critical The CVE Program — Common Vulnerabilities and Exposures — is the backbone of vulnerability tracking. It gives cybersecurity professionals a universal system to identify, communicate, and fix security flaws quickly. Without CVEs, patching would be slower, coordination chaotic, and defenses weaker. Earlier […]
The National Institute of Standards and Technology (NIST) has released a draft Cybersecurity Framework Profile for Ransomware Risk Management to help organizations prevent, respond and recover from ransomware attacks. The Ransomware Profile is intended to be used by organizations that have adopted the NIST Cybersecurity Framework and want to improve their risk postures or any organization that […]
The Computer Emergency Response Team of Ukraine (CERT-UA) has revealed a new set of cyber attacks targeting Ukrainian institutions with information-stealing malware. The activity is aimed at military formations, law enforcement agencies, and local self-government bodies, particularly those located near Ukraine’s eastern border, the agency said. The attacks involve distributing phishing emails containing a macro-enabled Microsoft Excel […]
In early 2025, Oracle Health (formerly Cerner) experienced two significant cybersecurity incidents that impacted multiple U.S. healthcare providers. 🔍 What Happened? The FBI and cybersecurity firm CrowdStrike are currently investigating.