The Cybersecurity and Infrastructure Security Agency (CISA) has announced its priorities for the Joint Cyber Defense Collaborative (JCDC) in 2024. The JCDC aims to improve cyber defense by aligning the strategic direction and resources of government and private organizations. The three broad priorities for 2024 are defending against advanced persistent threat (APT) operations, raising baseline protections for critical infrastructure, and anticipating emerging technology and risks. The release of the priorities comes amid criticism of the JCDC, with concerns raised about its effectiveness due to a lack of technical expertise and too many lawyers. Recent reports suggest that security researchers are becoming less active, partly due to backlash from conservatives over election disinformation efforts. The JCDC has also faced criticism for being a “cool-club for vendors” rather than delivering value to industry. Other recent concerns include warnings from the federal government about Chinese intrusions into critical infrastructure and the need for CISA to be faster at sharing information and more aggressive in mitigating threats. The prioritization of APT defense will involve updating the National Cyber Incident Response Plan and working to defend against state-sponsored hacking, particularly from China. CISA also plans to help secure sensitive networks used by state and local election officials and make measurable progress in reducing ransomware attacks and the risk posed by AI to critical infrastructure.
CISA unveils roadmap: Joint Cyber Defense on the rise in 2024
![](https://cybsecwizard.com/wp-content/uploads/2023/09/Why-Small-Businesses-are-a-Target-for-Cyber-Attacks.png)
Latest from Blog
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Decoding-Fintech-Licenses.jpg)
Get the inside scoop on cybersecurity with Contrast CISO David Lindner
TLDR: SQL injection remains a problem that can be prevented with application detection and response. Implementing multi-factor authentication can help lower cybersecurity insurance costs. CISA’s role in election disinformation highlights the need
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Digital-Banks_-How-They-Operate.jpg)
Stay ahead with the Cybersecurity Pulse Report: Black Hat 2024 Edition
Cybersecurity Pulse Report – Black Hat 2024 Edition Summary TLDR: This will be uploaded to wordpress and so you can start with a Cybersecurity Pulse Report – Black Hat 2024 Edition Key
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Peer-to-Peer-P2P-Lending-Revolution.jpg)
Moody’s: Cyber insurance competition rises, prices fall
Moody’s Ratings: Cyber Insurance Competition Up, Prices Down TLDR: Cyber insurance market poised for growth due to increased demand. New players entering the market may decrease premiums. Article Summary The cyber insurance
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Impact-of-GDPR-on-Fintech-Companies.jpg)
Syxsense acquires Absolute to beat cyber vulnerabilities with strength
TLDR: Absolute Security has acquired Syxsense to enhance its cyber resilience platform. The acquisition will simplify patching and remediation issues through automation. Article Summary: Absolute Security has acquired Syxsense to improve its
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Evolving-Cybersecurity-Needs-in-Fintech.jpg)
Apache’s OFBiz gets new fix for RCE exploits
TLDR: Apache released a security update for OFBiz to patch vulnerabilities, including a bypass of patches for two exploited flaws. The bypass, tracked as CVE-2024-45195, allows unauthenticated remote attackers to execute code
![](https://cybsecwizard.com/wp-content/uploads/2023/12/The-Financial-Security-of-Fintech_-FDIC-and-Beyond.jpg)
Feds caution: Russia-linked CVE threats target essential infrastructure
TLDR: Threat groups linked to Russia’s military intelligence service are targeting critical infrastructure in various sectors. The attackers have defaced websites, scanned infrastructure, and leaked stolen data. Summary: Federal authorities in the
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Machine-Learning-in-Fraud-Detection.jpg)
Allies blame Russian military for destructive cyber-attacks
TLDR: US and allies accuse Russian military of launching cyber-attacks targeting critical infrastructure for espionage and sabotage purposes. Unit 29155, a cyber group affiliated with the Russian military, is responsible for deploying
![](https://cybsecwizard.com/wp-content/uploads/2023/12/The-Role-of-UX-and-UI-in-Fintech-Apps.jpg)
Brazil bans X, and Tom Alcock on cybersecurity talent hunt
TLDR: Key Points: Brazil banned X (Twitter) due to misinformation during the presidential election. Tom Alcock, founder of Code Red Partners, discussed the importance of cybersecurity talent recruitment beyond traditional methods. In
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Top-Fintech-Trends-of-2023.jpg)
Palo Alto Networks acquires IBM’s QRadar Assets in SIEM victory
Article Summary TLDR: Palo Alto Networks has acquired IBM’s QRadar SaaS assets to enhance its cybersecurity capabilities. The integration of QRadar’s assets into Palo Alto Networks’ Cortex XSIAM platform will lead to
![](https://cybsecwizard.com/wp-content/uploads/2023/12/Machine-Learning-in-Fraud-Detection.jpg)
NIST CSF 20: Secure your cyber world with confidence framework
TLDR: NIST has released Version 2.0 of its Cybersecurity Framework (CSF) with an enhanced focus on Privileged Access Management (PAM) and Identity & Access Management (IAM). Key updates in NIST CSF 2.0