Two U.S. senators stated that a new report on spyware delivery via targeted ads highlights the need for stronger industry security. The Citizen Lab at the University of Toronto and Confiant published findings on a technique called AdFection that uses ads to install spyware. Senators Ron Wyden and Cory Booker argued that the report proves…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. The specific flaw is CVE-2026-114625, an SQL injection vulnerability in Arista VeloCloud Orchestrator. This addition aligns with Binding Operational Directive 26-04, which requires Federal Civilian Executive Branch agencies to prioritize rapid remediation of high-risk vulnerabilities listed in…
By Sara Friedman / April 29, 2025 SAN FRANCISCO.
The Fed’s balance sheet is distributed across the 12 banks that make up the Federal Reserve System. The assets and liabilities on the balance sheet reflect the Fed’s role in conducting the nation’s monetary policy and supporting financial market stability.
A cybersecurity expert explains that System Security Plans and Plans of Action and Milestones are not new to defense contractors. These documents have been required under DITSCAP, DIACAP, RMF, and now CMMC. The core requirement remains to document system protections and track open findings. Under CMMC Level 2, contractors must meet at least 88 of…
The US Treasury announced it will sell 75 billion dollars of 17-week bills on October 21, 2026. It also plans to auction 105 billion dollars of 8-week bills and 110 billion dollars of 4-week bills on October 22. All of these auctions are scheduled to settle on October 27. The article notes that such routine…
The General Services Administration obligated $8,771,468.28 to Ernst and Young LLP on October 7, 2026, for financial systems technology support and modernization. The delivery order, numbered 47QFDA22F0017, involves the exercise of an option under existing contract terms. This transaction represented approximately 11.3 percent of the agency's total spending during the week of October 2 to…
The US Treasury Department reported that total federal debt outstanding reached $40.41 trillion on October 21, 2026. This figure represents an increase of $301.5 billion from the previous month and a rise of $2.39 trillion compared to the same date in 2025. Debt held by the public accounted for $32.57 trillion, while intragovernmental holdings made…
NIST has opened a comment period for its draft Special Publication 800-221r1. The document focuses on governing and managing information and communications technology risk within an enterprise portfolio. It aims to help organizations align their risk management with the NIST Cybersecurity Framework 2.0. The public comment period remains open through December 7, 2026. Read the…
GovRAMP launched an AI Security Task Force to create practical guidance for AI-enabled cloud products used by government agencies. The initiative builds on established standards, specifically NIST SP 800-53 Rev. 5 and the NIST AI Risk Management Framework, to address new data flows and dependencies. The group is developing an AI Self-Reporting Addendum to help…