Cybersecurity

Kept in the dark

Meet the hired guns who make sure school cyberattacks stay hidden.

China-linked fraud network exploits stolen Massachusetts identities to target U.S. banks

It’s not clear who exactly the Chinese operatives are, but the scheme has been ongoing and persistent, said Socure executive Jordan Burris.

Preparing for battle: Cybersecurity incident response for public bodies

COMMENTARY | It may feel impossible to plan for a cyberattack, but public sector organizations can take several steps now to protect themselves, both legally and through policy.

Generative AI in government: What to expect in 2025

2025 may be a major year for generative AI adoption across government.

School software provider is the latest target of major hack of personal data

The incident is the latest large-scale data breach in the U.S., as year after year, the number of cybercrimes continues to rise.

Exclusive

Coming federal cyber executive order includes a push to mobile drivers licenses

The draft order does not, however, tackle the full breadth of actions that were expected from a promised identity executive order that has yet to materialize.

Resilience over resources: Closing the cybersecurity gap in state and local government

COMMENTARY | While they may lack the budget and staff to mount an effective defense, states and localities can take many other steps without needing to spend more money.

Exclusive

GAO mulls cost evaluation of nationwide telecom hardware replacement

One major vulnerability exploited by China’s Salt Typhoon hacking unit is a Cisco hardware flaw that can’t be patched and requires physical replacement, according to a person with knowledge of the intrusions.

Parents think schools’ cybersecurity is stronger than reality, report says

Recent research from Keeper Security found a “widening gap” between the perception of districts’ cyber readiness. Better training and information sharing can help improve the outlook.

How govs can strengthen their cyber staff in the new year

Budgetary and staffing challenges are likely to follow state and local governments into 2025, but experts say agencies’ progress toward addressing those obstacles will prevail too.

Governor urges Rhode Islanders to take precautions to protect personal data

Gov. Dan McKee called the deadline given by hackers who installed malicious malware on the RIBridges system and demanded a ransom a “moving target” at a press conference late Saturday afternoon.

Cyber ranges get a boost in Maryland to strengthen the cyber talent pipeline

Public- and private- sector employers in Maryland want more cyber professionals with hands-on experience out of college. State officials are answering their call by investing in cyber ranges.

Empowering state and local governments in the evolving tech landscape

COMMENTARY | Agency employees can leverage new developments to deliver positive outcomes for their constituents. It is up to them to seize these new opportunities.

Could states’ cyber get trickier under a Trump admin?

Some Republicans have proposed eliminating CISA altogether, which could complicate information sharing efforts. More pressing, though, is the ending of federal cyber grants.

Cyber training is key to help underserved communities, report finds

States must work to develop cybersecurity professionals in areas that have been left behind, and can use relationships with schools and nonprofits to do so, according to a new NASCIO report.

State and local security adjusting to shifting cyber threats, insurance requirements

COMMENTARY | Ransomware and other threats are making cyber insurance—and the stronger security needed to qualify for it—imperative for government organizations.

New art exhibit helps make cyber issues real

The show in Alexandria, Virginia, explores issues like privacy, artificial intelligence and misinformation through artistic expression.

TSA to allow mobile driver’s licenses after REAL ID goes into effect

The final rule will allow states that have issued mobile driver’s licenses to apply for TSA-issued waivers of certain REAL ID requirements.

How Nebraska's new tech chief is moving the state out of the era of mainframes and landlines

Nebraska’s technology infrastructure is outdated and its data is largely neglected. Matthew McCarville, the state’s new CIO, has big plans to change that, and it starts with the state’s employees.

Why Cybersecurity Awareness Month should be every month

COMMENTARY | Cybercrime costs have surpassed $10 trillion globally, illustrating the relentless threat and why state CISOs say they want the spotlight on cybersecurity year-round.