Cynthia Brumfield

Cynthia Brumfield is a veteran communications and technology analyst who is currently focused on cybersecurity. She runs a cybersecurity news destination site, Metacurity.com.

Telecom insiders detail hardships posed by Chinese technology ban

Telecom insiders detail hardships posed by Chinese technology ban

Banning Chinese Telecom vendors Huawei and ZTE creates fear, uncertainty and doubt as well as new supply chain security ideas among small telcos.

Why the Huawei ban is bad for security

Why the Huawei ban is bad for security

Many believe the ban on exporting U.S. technology to Chinese company Huawei could hurt American tech vendors and do little to mitigate supply chain threats.

2016 election hacking in Florida: Russian emails, hidden tracks

2016 election hacking in Florida: Russian emails, hidden tracks

The Mueller Report says the Russians planted malware on at least one Florida county system, and Florida's governor announces that two counties were hacked in 2016. Experts believe the problem could be bigger.

Why local governments are a hot target for cyberattacks

Why local governments are a hot target for cyberattacks

Recent ransomware and other attacks underscore the value attackers see in the data stored in city and regional government systems. Here's why they are vulnerable and what they can do to reduce the threat.

FEMA contractor at center of privacy violation provides services to many other agencies

FEMA contractor at center of privacy violation provides services to many other agencies

Corporate Lodging Consultants provides lodging services to many other government agencies. Is more sensitive personal information at risk?

Congress steers clear of industrial control systems cybersecurity

Congress steers clear of industrial control systems cybersecurity

Industry resistance to regulation, complexity of securing ICS systems are roadblocks to passage of critical infrastructure cybersecurity legislation.

New CISA director outlines top 5 priorities for protecting U.S. critical infrastructure

New CISA director outlines top 5 priorities for protecting U.S. critical infrastructure

CISA’s Christopher Krebs has a two-year plan for his new cybersecurity agency, with China, supply chain and 5G as top priorities.

The cybersecurity legislation agenda: 5 areas to watch

The cybersecurity legislation agenda: 5 areas to watch

The 116th Congress is only a few months old, but far-reaching cybersecurity bills to protect infrastructure and the supply chain, ensure election integrity, and build a security workforce are now being considered. Here’s the list.

EFF has an encryption plan for the entire internet

EFF has an encryption plan for the entire internet

Spurred by government surveillance of data, the Electronic Frontier Foundation is making progress toward its goal of encrypting all internet traffic using technology and scorecards.

Why one of America’s top experts is hopeful for better election security

Why one of America’s top experts is hopeful for better election security

Voting machines and elections in general are still vulnerable to hacking, says Matt Blaze, but adoption of risk-limiting audits and software independence gives opportunity for improvement.

How Facebook's privacy woes might change the rules of the road in 2019

How Facebook's privacy woes might change the rules of the road in 2019

Following a string of data privacy and protection missteps, Facebook faces potential backlash from legislators and consumers that could affect all companies that process consumer data.

Finally, a meaningful congressional report on stemming cybersecurity attacks

Finally, a meaningful congressional report on stemming cybersecurity attacks

The Cybersecurity Strategy Report offers solutions to six problem areas in an effort to improve IT's ability to cope with today's cyber threat landscape.

Who is responsible for IoT security in healthcare?

Who is responsible for IoT security in healthcare?

NIST panel debates who should own IoT security: vendors or users. The issue is especially important when it comes to protecting medical devices.

With supply chain security grabbing headlines, NIST sees new relevance for its guidance

With supply chain security grabbing headlines, NIST sees new relevance for its guidance

Supply chain is sexy again, and NIST hopes that means more companies take its supply chain risk guidance seriously.

NIST framework released to widespread praise, but what happens next?

Responsibility now falls on DHS to refine and implement framework while also developing incentives for critical infrastructure providers to follow it

Adoption, privacy biggest topics as NIST cybersecurity framework nears February deadline

Industry leaders express concerns at last workshop prior to finalizing framework

NIST's latest cybersecurity framework reveals a lot of goodwill amidst continued criticism

NIST's latest cybersecurity framework reveals a lot of goodwill amidst continued criticism

After implementing changes based on feedback, NIST's latest version of framework receives praise

Major changes ahead as NIST cybersecurity framework nears October publication

Even as the deadline for the NIST cybersecurity framework, developed per an executive order, looms ever nearer, changes are still being implemented

Draft cybersecurity framework gets mixed reviews, October deadline looms

NIST has released an updated draft of its framework intended to help establish and maintain cybersecurity risk programs, but some say there's still work to be done

NIST closer to critical infrastructure cybersecurity framework

Recent workshops gained feedback to be used for preliminary draftwork

Load More