Stay informed on government cyber security initiatives, policy changes, and threats. Your source for the latest in government infosec news and updates.
Search across headline titles and summaries.
Background for this topic.
Government encompasses public institutions and the systems used to administer services, enforce laws, manage public funds, and protect classified or otherwise sensitive information. Its distinctive assets include identity and benefits records, tax and health data, diplomatic material, election infrastructure, and operational technology supporting utilities or emergency services. Availability and integrity can be as important as confidentiality: outages or altered records may disrupt essential services, public safety, or legal processes.
Security therefore spans citizen-facing portals, internal networks, remote access, contractors, and shared infrastructure, including systems that depend on legacy technology or tightly connected suppliers. Espionage, credential compromise, exploitation of unpatched vulnerabilities, and disruptive attacks are material risks, though exposure varies by agency and system. Useful controls include strong identity management, network segmentation, encryption, privacy safeguards, prioritized vulnerability management, tested backups, and rehearsed incident response. Procurement rules, records obligations, and sector-specific compliance also shape how agencies collect, retain, share, and investigate data.
Spoiler alert: just about all of them, all across the planet More than 70,000 websites belonging to Fortune 500 brands, government agencies, and universities share consumers' data with Twitter using data tracking code hosted on these other organizations' websites, according to research published on Thursday by Adalytics.…
The latest idea in the long gestation of the online harms legislation The UK government is putting forward changes to the law which would require social media platforms to give users the option to avoid seeing and engaging with harmful — but legal — content.…
A DCMS official sets out the UK government's cybersecurity strategy during Black Hat Europe 2022
Latest move shows urgent need to nurture skills pipeline
Voluntary code of conduct is designed for developers and app store operators
You won't see 'Agent of vile murderous autocracy' on their CVs. Or their faces on vid chats North Korean IT pros are using freelancing platforms to earn money that the nation's authoritarian government uses to fund the development of missiles and nuclear weapons, according to South Korea's government. Seoul therefore wants gig platforms to impose stricter checks to restrict its enemy's activities.…
Texas, Indiana and others bucking app off government devices Two more US states have launched aggressive action against made-in-China social media app TikTok.…
Almost a third (30%) of applications used by Defra are unsupported, a report from the National Audit Office has revealed
New Zealand government reels, Vanuatu’s spent weeks entirely offline New Zealand's Privacy Commission has signalled it may open an investigation into local managed services provider Mercury IT, which serves many government agencies and businesses and has been hit by ransomware.…
The move would shed light on hackers and sound the alarm more widely on cyber-threats in the country.
Hackers with ties to the Iranian government have been linked to an ongoing social engineering and credential phishing campaign directed against human rights activists, journalists, researchers, academics, diplomats, and politicians working in the Middle East
A new data wiper malware called CryWiper has been found targeting Russian government agencies, including mayor's offices and courts