The Pentagon is suspending the ramp up of new Cybersecurity Maturity Model Certification third-party assessment requirements, while also launching a sweeping review of the CMMC program that once again calls into question the future of the contractor cyber compliance regime. In a July 13 announcement, the Defense Department said it is suspending plans to […]
Category Archives: Cybersecurity
The Senate Armed Services Committee has advanced legislation that would set up a grant program for small businesses and nontraditional contractors to cover the costs of Cybersecurity Maturity Model Certification (CMMC) compliance. The CMMC grant program is included in the full text of the committee’s fiscal 2027 defense authorization bill, released Tuesday. The committee released […]
Charlie Sciuto October 6, 2025 1:31 pm The MORSECORP settlement shows that cybersecurity lapses are now legal and financial liabilities — not just technical ones. When the Justice Department announced a $4.6 million False Claims Act (FCA) settlement with defense contractor MORSECORP, Inc. (MORSE) this spring, it sent a clear message to the defense industrial base: […]
Pentagon to officially implement CMMC requirements in contracts by Nov. 10 The amendment to the Defense Federal Acquisition Regulation Supplement marks the near end of a years-long effort to enforce CMMC 2.0 cybersecurity standards for defense contractors. The Pentagon has posted the much-anticipated updated rule that will require contracts to implement Cybersecurity Maturity Model Certification […]
Cybercriminals are focused on ransomware, business email compromise and cryptojacking right now, but a recent report from IBM X-Force thinks AI and ChatGPT could be next. IBM X-Force hasn’t seen any AI-engineered campaigns, yet, but mentions of AI and ChatGPT are proliferating on the dark web. The X-Force Threat Intelligence Index 2024 report identified over 800,000 references […]