After the release of National Security Memorandum 22 (NSM-22) by U.S. President Joe Biden in April, the Cybersecurity and Infrastructure Security Agency (CISA), acting as the National Coordinator for critical infrastructure security and resilience, will craft the 2025 National Infrastructure…

The U.S. Government Accountability Office (GAO) has added a ‘priority recommendation’ for the Environmental Protection Agency (EPA), taking the total number to 12. The recommendations involve five areas, including improving the nation's water quality; addressing data and risk communication issues…

The U.S. National Institute of Standards and Technology (NIST) has introduced the 'Assessing Risks and Impacts of AI' (ARIA) program, a testing, evaluation, validation, and verification (TEVV) initiative aimed at enhancing the understanding of artificial intelligence's capabilities and effects. The…

The U.S. Department of Defense's Defense Acquisition Regulations System has forwarded a proposal to the Office of Management and Budget (OMB) for clearance under the Paperwork Reduction Act. This initiative aims to assess contractors' adherence to cybersecurity requirements, aligning with…

Why everyone is so upset and what we can learn from the near-disaster At least it’s not a disaster, but only a near-disaster: a cleverly hidden backdoor in a very widely used open source software collection (xz utils) was found…