Cynthia Brumfield
Cynthia Brumfield is a veteran communications and technology analyst who is currently focused on cybersecurity. She runs a cybersecurity news destination site, Metacurity.com.
Why the Huawei ban is bad for security
Many believe the ban on exporting U.S. technology to Chinese company Huawei could hurt American tech vendors and do little to mitigate supply chain threats.
2016 election hacking in Florida: Russian emails, hidden tracks
The Mueller Report says the Russians planted malware on at least one Florida county system, and Florida's governor announces that two counties were hacked in 2016. Experts believe the problem could be bigger.
Why local governments are a hot target for cyberattacks
Recent ransomware and other attacks underscore the value attackers see in the data stored in city and regional government systems. Here's why they are vulnerable and what they can do to reduce the threat.
FEMA contractor at center of privacy violation provides services to many other agencies
Corporate Lodging Consultants provides lodging services to many other government agencies. Is more sensitive personal information at risk?
Congress steers clear of industrial control systems cybersecurity
Industry resistance to regulation, complexity of securing ICS systems are roadblocks to passage of critical infrastructure cybersecurity legislation.
New CISA director outlines top 5 priorities for protecting U.S. critical infrastructure
CISA’s Christopher Krebs has a two-year plan for his new cybersecurity agency, with China, supply chain and 5G as top priorities.
The cybersecurity legislation agenda: 5 areas to watch
The 116th Congress is only a few months old, but far-reaching cybersecurity bills to protect infrastructure and the supply chain, ensure election integrity, and build a security workforce are now being considered. Here’s the list.
EFF has an encryption plan for the entire internet
Spurred by government surveillance of data, the Electronic Frontier Foundation is making progress toward its goal of encrypting all internet traffic using technology and scorecards.
Why one of America’s top experts is hopeful for better election security
Voting machines and elections in general are still vulnerable to hacking, says Matt Blaze, but adoption of risk-limiting audits and software independence gives opportunity for improvement.
How Facebook's privacy woes might change the rules of the road in 2019
Following a string of data privacy and protection missteps, Facebook faces potential backlash from legislators and consumers that could affect all companies that process consumer data.
Finally, a meaningful congressional report on stemming cybersecurity attacks
The Cybersecurity Strategy Report offers solutions to six problem areas in an effort to improve IT's ability to cope with today's cyber threat landscape.
Who is responsible for IoT security in healthcare?
NIST panel debates who should own IoT security: vendors or users. The issue is especially important when it comes to protecting medical devices.
With supply chain security grabbing headlines, NIST sees new relevance for its guidance
Supply chain is sexy again, and NIST hopes that means more companies take its supply chain risk guidance seriously.
NIST framework released to widespread praise, but what happens next?
Responsibility now falls on DHS to refine and implement framework while also developing incentives for critical infrastructure providers to follow it
Adoption, privacy biggest topics as NIST cybersecurity framework nears February deadline
Industry leaders express concerns at last workshop prior to finalizing framework
NIST's latest cybersecurity framework reveals a lot of goodwill amidst continued criticism
After implementing changes based on feedback, NIST's latest version of framework receives praise
Major changes ahead as NIST cybersecurity framework nears October publication
Even as the deadline for the NIST cybersecurity framework, developed per an executive order, looms ever nearer, changes are still being implemented
Draft cybersecurity framework gets mixed reviews, October deadline looms
NIST has released an updated draft of its framework intended to help establish and maintain cybersecurity risk programs, but some say there's still work to be done
NIST closer to critical infrastructure cybersecurity framework
Recent workshops gained feedback to be used for preliminary draftwork
-
White Paper
-
White Paper
-
White Paper
-
White Paper
-
White Paper
