CISA
US CISA Deputy Director uploads sensitive office files to Microsoft owned ChatGPT
Whether done knowingly or inadvertently, the sharing of official documents with online platforms such as ChatGPT is widely regarded as a potential security risk. Any disclosure of internal data to a third-party service—especially one operated outside an organization’s direct control—can expose sensitive information and lead to privacy, compliance, or national security concerns for the data […]
CISA furloughing staff scheme triggers cybersecurity concerns
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is set to implement a furlough scheme affecting over 45% of its workforce, as the agency awaits funding approval from the Trump administration. While such measures are typically introduced to alleviate the financial burden on taxpayers, they have sparked concerns, particularly in the realm of cybersecurity. According […]
CISA Suspends Use of VirusTotal and Censys, Signaling Potential Setbacks for Cyber Defense Efforts
The Cybersecurity and Infrastructure Security Agency (CISA), a key agency responsible for protecting the United States’ critical infrastructure, has taken a significant step by instructing its threat hunting team to cease using VirusTotal—a widely used cybersecurity tool—by April 20, 2025. The decision is a part of a broader shift in CISA’s approach to threat intelligence […]
CISA offers Voluntary Cyber Incident Reporting Portal
In the event of a cyber-attack on your company’s IT infrastructure, it’s crucial to report the incident in detail to law enforcement using the Voluntary Cyber Incident Reporting Portal, even if reporting is not mandated for your organization. This portal set up by America’s Cyber Defense Agency not only facilitates reporting but also serves as […]
CISA’s Shields Up and Shields Ready Programs: A Proactive Approach to Cybersecurity for Critical Infrastructure
Cyber threats are constantly evolving, targeting the very foundation of our nation’s security and economy. To combat this ever-present challenge, the Cybersecurity and Infrastructure Security Agency (CISA) recently launched a proactive program called Shields Up. The program’s core tenets emphasize the importance of continuous preparedness, collaboration, and adaptation to combat evolving cyber threats. Shields Up […]
CISA Guidance Strengthens Data Security, Neglects Web Access Security
CISA’s recent guidance to shift from VPNs to SSE and SASE products strengthens data protections, but misses an opportunity to champion more robust, hardware-enforced, security controls to harden access points like web browsers. Acting in the wake of several major vulnerabilities against VPN products at the beginning of this year, the US Cybersecurity and Infrastructure […]
Upcoming June 11th CISA Deadline Exposes Widespread Unpreparedness in Software Security Compliance
A recent study by Lineaje has uncovered a startling lack of preparedness among organizations for the upcoming U.S. Cybersecurity & Infrastructure Agency’s (CISA) Secure Software Development Attestation Form deadline. The research, conducted at RSA Conference 2024, reveals that a mere 20% of companies are ready to meet the June 11, 2024, compliance deadline, a critical […]
