Securing Federal Cloud Environments: CISA SCuBA Guidelines and Censys Solutions
CISA's BOD 25-01 mandates secure cloud practices for federal agencies. Learn how SCuBA baselines and cloud security hygiene defend against evolving threats.
Topic
Federal / Government
11 posts
Now You CVE, Now You Don't: How the MITRE CVE Program Nearly Went Dark
CISA extends MITRE's CVE program contract after funding scare. Learn how the near-lapse exposed fragilities in the vulnerability management system the security industry depends on.
How the New White House Executive Order Can Up-Level the U.S. Cyber Game
Biden's cybersecurity executive order strengthens federal software supply chain security. Learn how new government policies address critical infrastructure cyber risks and threats.
Proactive Cybersecurity: How to Achieve NIST CSF 2.0 Objectives with Censys
Discover how the Censys Internet Intelligence Platform aligns with NIST CSF 2.0 to manage cybersecurity risks, reduce your attack surface, and strengthen your organization's security posture.
Discovery of NTC Vulkan Infrastructure
In March 2023, various media outlets published details from documents received in February of 2022 from a former NTC Vulkan employee who opposed Russia’s invasion of Ukraine. Moscow-based NTC Vulkan, the outlets reported, was contracted by Russian intelligence to create the following offensive cyber tools: In this investigation, Censys researchers discovered six hosts […]
Identifying CISA BOD 23-02 Internet-Exposed Networked Management Interfaces with Censys
UPDATE 2023-06-28: A section of the second paragraph of this article describing the FCEB hosts we examined for this analysis was edited for clarity. Executive Summary On June 13, CISA released BOD 23-02 with the objective of mitigating the risks associated with remotely accessible management interfaces that might allow configuration or control of federal agency […]
SoftEther VPN: Identifying VPN Software Across the Internet
SoftEther VPN is a free, open-source VPN client created by researchers in Japan and used for commercial and non-commercial use. The United States, Japan, and China are the top three countries where Censys observed the highest number of SoftEther hosts. Censys also found that four of the top ten autonomous systems where SoftEther […]
What You Need to Know About Biden's Long Awaited Cybersecurity Strategy
The Biden Administration’s long awaited National Cybersecurity Strategy was released outlining the strategy, goals, and implementation plan to drive a robust, collaborative approach to securing our global digital landscape. To mitigate the ever-mounting risk in both the public and private sectors, The White House places cybersecurity as a central tenant to the functioning of […]
Why This European Government Agency Uses Attack Surface Management
Attack surface management (ASM) is becoming an integral, value-add strategy for cybersecurity teams across industries, including those in government. Our own partnerships with government agencies around the world highlight how ASM complements government threat hunting and response efforts. Teams use ASM tools like the Censys Attack Surface Management Platform to gain greater visibility into […]
How a State Agency Automated Attack Surface Management in the Age of Remote Work
Soon after the Covid-19 pandemic hit, Censys partnered with a state agency that wanted to scale their risk management program by automating attack surface discovery and tracking. New challenges had emerged after their workforce moved to a remote working state. Key benefits By partnering with Censys, the state agency gained: The goals Manage attack surface […]
In Support of the New CISA Directive (What It Means & How to Take Action)
Earlier this month, the federal government’s Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive 23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks. The directive applies to all Federal Civilian Executive Branch systems and the agencies operating those systems. CISA states that their directive is an effort to make more measurable progress […]