libreoffice openoffice bug allows hackers spoof

NIST 800-171 Rev 2/Cybersecurity Maturity Model Certification (CMMC Level 2): References NIST 800-124 “ Guidelines for Managing the Security of Mobile Devices in the Enterprise,” which discusses MTD.CISA Binding Operational Directive (BOD) 22-01: Incorporates significant risk of known and exploited vulnerabilities requirement.Supply Chain Bill of Materials (SBOM) Department of Homeland Security (DHS) Supply Chain Risk Management Act of 2021: Addresses mobile device security.2 “Guidelines for Managing Security of Mobile Devices”: References MTD National Institute of Standards and Technology (NIST) Special Publication (SP) 1800-22: Bring Your Own Device (BYOD) reference architecture depicts on-device detection.Chief Information Officer (CIO) FMG: International Travel Guidance incorporates always-on, on-device protections.Federal Mobility Group (FMG): Mobile Security publication.CISA Capacity Enhancement Guide: References MTD specifically.OMB 22-01: Definition of Endpoint Detection and Response (EDR) incorporates mobile phones.OMB 21-31: Mentioned within the logging requirements.Not only do agencies need to incorporate mobile device security as part of their Zero Trust initiatives, but they also need to understand the breadth of compliance mandates addressing this issue.įor example, the following mandates all mention mobile device security, but more specifically, they include mobile threat detection (MTD) either specifically or by implication: Mobile device security is increasingly essential to any agency compliance initiative, especially in a remote work environment. Complexities and Interdependencies: The Mobile Device Problem When comparing this data, the key takeaway is that agencies need solutions that solve more than one Zero Trust architecture pillar at a time not only to meet requirements but protect their devices. 18% prioritized OMB 21-31, focusing on investigation and remediation capabilities.24% prioritized OMB 22-09, focusing on Zero Trust Architectures.58% prioritized OMB 22-01, focusing on endpoint detection and response.Similarly, Zimperium surveyed agency technology leaders and found: 4 in 10 respondents cited the interdependency and complexity of existing technologies as a fundament Zero Trust challenge.2 in 3 respondents overall believed that Zero Trust initiatives would consume 4% or more of their IT budgets.1 in 5 defense/intelligence agencies predicted Zero Trust initiatives would consume 10% or more of their IT budgets.In May 2022, FedScoop’s interviewed 177 pre-qualified federal agency IT decision-makers, noting: The problem is many struggle to allocate budgets effectively and efficiently. Not only do FCEB agencies need to comply with federal initiatives, but they also must monitor the ever-evolving threat landscape to protect their corporate data. The recent news has raised concerns among the House intelligence committee and is believed to be only the tip of the iceberg for federal agencies and the security of their devices. Limited Budgets in the Ever-Evolving Threat LandscapeĪccording to Bloomberg, last year, attackers infiltrated the phones of US diplomats in Uganda using a kind of spyware known as Pegasus, one of the most sophisticated spyware that can access a victim’s messages, camera, and microphone without the victim clicking on a single link. Fundamentally, FCEB agencies need to find solutions that address as many security requirements while spending as little money as possible. Despite the directives’ interconnected nature, Federal Civilian Executive Branch (FCEB) agencies still have budgetary constraints, meaning prioritizing their investments is mission-critical. Since the publication of the Executive Order on Improving the Nation’s Cybersecurity (“EO”), the Office of Management and Budget (OMB) has released several directives. Federal agencies face a unique set of challenges.

Libreoffice openoffice bug allows hackers spoof