Trump administration under scrutiny as it puts major round of CISA cuts on the table  Cybersecurity Dive

This audio is auto-generated. Please let us know if you have feedback. President Donald Trump signed an executive order (EO) Friday that scratched or revised several of his Democratic predecessors’ major cybersecurity initiatives. “Just days before President Trump took office, the Biden Administration attempted to sneak problematic and distracting issues into cybersecurity policy,” the White House said in a fact sheet about Trump’s new directive, referring to projects that Biden launched with his Jan. 15 executive order. Trump’s new EO eliminates those projects, which would have required software vendors to prove their compliance with new federal security standards, prioritized research and testing of artificial intelligence for cyber defense and accelerated the rollout of encryption that withstands the future code-cracking powers of quantum computers. “President Trump has made it clear that this Administration will do what it takes to make America cyber secure,” the White House said in its fact sheet, “including focusing relentlessly on technical and organizational professionalism to improve the security and resilience of the nation’s information systems and networks.” Major cyber regulation shift Trump’s elimination of Biden’s software security requirements for federal contractors represents a significant government reversal on cyber regulation. Following years of major cyberattacks linked to insecure software, the Biden administration sought to use federal procurement power to improve the software industry’s practices. That effort began with Biden’s 2021 cyber order and gained strength in 2024, and then Biden officials tried to add teeth to the initiative before leaving office in January. But as it eliminated that project on Friday, the Trump administration castigated Biden’s efforts as “imposing unproven and burdensome software accounting processes that prioritized compliance checklists over genuine security investments.” Trump’s order eliminates provisions from Biden’s directive that would have required federal contractors to submit “secure software development attestations,” along with technical data to back up those attestations. Also now eradicated are provisions that would have required the Cybersecurity and Infrastructure Security Agency to verify vendors’ attestations, required the Office of the National Cyber Director to publish the results of those reviews and encouraged ONCD to refer companies whose attestations fail a review to the Justice Department “for action as appropriate.” Trump’s order leaves in place a National Institute of Standards and Technology collaboration with industry to update NIST’s Software Software Development Framework, but it eliminates parts of Biden’s order that would have incorporated those SSDF updates into security requirements for federal vendors. In a related move, Trump eliminated provisions of his predecessor’s order that would have required NIST to “issue guidance identifying minimum cybersecurity practices” (based on a review of globally accepted standards) and required federal contractors to follow those practices. AI security cut Trump also took an axe to Biden requirements related to AI and its ability to help repel cyberattacks. He scrapped a Biden initiative to test AI’s power to “enhance cyber defense of critical infrastructure in the energy sector,” as well as one that would have directed federal research programs to prioritize topics like the security of AI-powered coding and “methods for designing secure AI systems.” The EO also killed a provision would have required the Pentagon to “use advanced AI models for cyber defense.” On quantum computing, Trump’s directive significantly pares back Biden’s attempts to accelerate the government’s adoption of post-quantum cryptography. Biden told agencies to start using quantum-resistant encryption “as soon as practicable” and to start requiring vendors to use it when technologically possible. Trump eliminated those requirements, leaving only a Biden requirement that CISA maintain “a list of product categories in which products that support post-quantum cryptography … are widely available.” Trump also eliminated instructions for the departments of State and Commerce to encourage key foreign allies and overseas industries to adopt NIST’s PQC algorithms. The EO dropped many other provisions of Biden’s January directive, including one requiring agencies to start testing phishing-resistant authentication technologies, one requiring NIST to advise other agencies on internet routing security and one requiring agencies to use strong email encryption. Trump also cut language directing the Office of Management and Budget to advise agencies on addressing risks related to IT vendor concentration. In his January order, Biden ordered agencies to explore and encourage the use of digital identity documents to prevent fraud, including in public benefits programs. Trump eliminated those initiatives, calling them “inappropriate.”  Trump also tweaked the language of Obama-era sanctions authorities targeting people involved in cyberattacks on the U.S., specifying that the Treasury Department can only sanction foreigners for these activities. The White House said Trump’s change would prevent the power’s “misuse against domestic political opponents.” Amid the whirlwind of changes, Trump left one major Biden-era cyber program intact: a Federal Communications Commission project, modeled on the Energy Star program, that will apply government seals of approval to technology products that undergo security testing by federally accredited labs. Trump preserved the language in Biden’s order that requires companies selling internet-of-things devices to the federal government to go through the FCC program by January 2027.

Trellix Advanced Research Center identified a fully undetected infostealer malware sample written in Rust code that targeted games.

35,000 Solar Power Systems Exposed To Internet Are Vulnerable To Cyberattacks  CybersecurityNews

A "small-scale credential stuffing attack" took place on The North Face website after crooks obtained credentials elsewhere.

Microsoft is looking to save precious seconds during cyberattacks by unifying threat actor naming.

The Digital Manufacturing and Cybersecurity Institute (MxD) has released its Strategic Investment Plan (SIP) for 2025-2027, presenting a detailed roadmap to bolster the competitiveness, resilience, and cybersecurity of U.S. manufacturing.  Shaped by insights from manufacturers, technology providers, academic institutions, and government partners, the plan lays out a targeted investment strategy in digital engineering, factory modernization, supply chain resilience, and workforce development.  Published on March 19, 2025, the SIP identifies core areas for MxD’s focus over the next three years: digital engineering and design, future factory systems, supply chain visibility, and cybersecurity integration. These initiatives aim to address persistent challenges within the industrial base, particularly among small and medium-sized manufacturers (SMMs) that often lack the resources needed to adopt and scale digital manufacturing solutions. “We will continue to prioritize projects and proposals designed to meet the evolving needs of the industrial base, relying on your insights and involvement throughout. Our collaborative approach has proven to be effective during MxD’s first decade and continues to be the model driving this SIP and MxD forward,” Berardino Baratta, CEO at MxD. Illustration of the product lifecycle and how the flow of data represents a complex interconnected web among all aspects. Image via MxD. Data lifecycle framework and investment focus At the center of the SIP is a technical framework called the data lifecycle. This framework maps the flow of data across the various stages of a product’s lifecycle, from development and manufacturing to deployment and support. MxD underscores the importance of seamless data movement and high-fidelity data collection, which are vital for unlocking capabilities such as predictive maintenance, quality control, and secure information sharing throughout supply chains. MxD’s data lifecycle approach has already been applied in 189 research, cybersecurity, and workforce development projects totaling $415 million in public-private investments. One example, Project 22-06-01, titled “Proactive Worker Safety for Industry 4.0 Using AI,” employed artificial intelligence (AI) and Internet of Things (IoT) sensors to reduce worker fatigue, addressing a $136 billion annual challenge for US employers. For the 2025-2027 period, MxD plans to prioritize projects that promote technology adoption across supply chains, supported by new playbooks and guides to help manufacturers modernize, close digital gaps, and apply lessons from pilot programs. This approach aims to foster coordinated, sector-wide adoption. Another central pillar of the SIP is interoperability and data standards. MxD is working on a Machine-to-X Data Standards Playbook to consolidate and harmonize data standards used by manufacturers. This effort addresses the challenge of fragmented data formats and standards across different systems, which can hinder consistent data flows and semantic interoperability. To support digital engineering and design, MxD is updating model-based definition assessments to address the shortcomings of current evaluations and provide clearer guidance for manufacturers aiming to improve digital maturity. These updates will bolster MxD’s broader goal of enhancing collaboration and data sharing across product lifecycles, enabling better designs, improved performance, and reduced costs. Future factory development is another key emphasis of the SIP. MxD’s projects in this area aim to build digital environments that support real-time process optimization, data-driven decision-making, and production lines that can adapt quickly to disruptions and new customer demands. Initiatives around digital twins, 5G/6G integration, and cybersecurity best practices will help shape these future factories. In terms of supply chain resilience, the SIP outlines plans for new risk assessment tools and visibility platforms. These tools will rely on secure data-sharing practices and advanced analytics to reduce disruptions and improve the agility of domestic manufacturing in a volatile global landscape. Cybersecurity is also a core focus of the SIP, reflecting MxD’s role as the National Center for Cybersecurity in Manufacturing. With manufacturing identified as the most targeted sector for cyberattacks in recent years, MxD’s cybersecurity projects aim to enhance protections for both operational technology (OT) and information technology (IT) environments.  Two engineers walking through a manufacturing facility. Photo via MxD. The Digital Education, Resilience, and Innovation for Supply Chain (DERISC) initiative, carried out with the Defense Logistics Agency (DLA), is an example of how MxD is equipping U.S. manufacturers with the tools and protocols needed to secure their supply chains against digital threats. Workforce training and capability roadmaps On the workforce development front, MxD’s Virtual Training Center (VTC) offers around 20,000 courses tailored to meet the evolving needs of manufacturers.  These courses include advanced role-based training programs in data analytics, cybersecurity, and extended reality applications. As an affordable and scalable learning platform, the VTC aims to close the gap in workforce training for SMMs that often lack access to comprehensive learning management systems. MxD’s training programs, such as the Curriculum and Pathways Integrating Technology and Learning Program (CAPITAL) and Cybersecurity for Manufacturing Operational Technology (CyMOT) initiatives, are designed to prepare workers for digital manufacturing roles while also supporting national defense efforts by delivering specialized cybersecurity training for supply chain participants. The SIP identifies these workforce initiatives as critical, noting that 1.9 million manufacturing jobs could remain unfilled by 2033 without targeted upskilling efforts. Beyond individual projects, the SIP features an Appendix of Capability Advancement Roadmaps. These roadmaps chart technical progress across multiple domains, emphasizing that data standards, architecture, and interoperability are essential to enabling future-ready manufacturing.  For instance, roadmaps for digital twin deployment and supply chain visibility outline clear timelines and performance milestones, providing a transparent view of how MxD plans to scale its impact. MxD’s structured approach and technical framework are designed to help manufacturers adopt secure, data-driven practices that align with broader economic and defense objectives. As digital manufacturing influences operational practices and product standards, the SIP provides a framework that supports a more adaptable and resilient US manufacturing sector. Take the 3DPI Reader Survey — shape the future of AM reporting in under 5 minutes. What 3D printing trends should you watch out for in 2025? How is the future of 3D printing shaping up? To stay up to date with the latest 3D printing news, don’t forget to subscribe to the 3D Printing Industry newsletter or follow us on Twitter, or like our page on Facebook. While you’re here, why not subscribe to our Youtube channel? Featuring discussion, debriefs, video shorts, and webinar replays. Featured image shows illustration of the product lifecycle and how the flow of data represents a complex interconnected web among all aspects. Image via MxD. Ada Shaikhnag With a background in journalism, Ada has a keen interest in frontier technology and its application in the wider world. Ada reports on aspects of 3D printing ranging from aerospace and automotive to medical and dental.

Hackers can abuse the Safari Fullscreen API to steal login credentials, experts have warned.

Cyberattacks on UK retailers reveal deep cybersecurity talent shortages, with ethical hackers and AI threat specialists now critical.

New research from Fortinet reveals a worrying rise in cyberattacks powered by AI.