Ken HANSEN

Your CNSA 2.0 deadline isn't 2030. It's now. Most federal contractors are tracking the wrong timeline. They're focused on 2030 firmware signing deadlines and 2033 legacy system cutoffs. By January 1, 2027, all new NSS acquisitions are expected to be CNSA 2.0-compliant by default. That means the hardware, operating systems, appliances, and applications you’re designing, certifying, and bidding... Must already be PQC-ready and CNSA 2.0 aligned. Not “we’ll fix it in 2030.” But if you can't enumerate your RSA and ECDSA assets today, you're already behind. Here's what the roadmap actually looks like: → Ongoing Discovery starts now (cryptographic bill of materials takes weeks, not days) → ML-KEM-1024 and ML-DSA-87 are your approved algorithms for key establishment and signatures → Crypto-agility matters more than algorithm selection We're seeing two types of organizations: those treating this as a 2030 problem, and those who started their CBOM last quarter. The second group will have a competitive advantage when federal procurement requirements tighten. I built a one-page cheat sheet with all compliance checkpoints, approved algorithms, migration strategy, and regulatory deadlines. Comment "roadmap," and I'll send you the full high-res version

27

8 Comments

A former general manager at Trenchant, the spyware division of defense contractor L3Harris Technologies, has pleaded guilty to two counts of theft of trade secrets after selling sensitive U.S. cybersecurity software to a Russian cyber-tools broker. #L3Harris #Spyware #Cybersecurity

3

1 Comment

On this week's Priorities Podcast, Colin Wood is joined by Center for Internet Security's John D. Cohen and Carlos P. Kizzee to discuss the evolving and worsening cybersecurity threat landscape for state, local, tribal and territorial governments. 🚨 🖥️ 🔓 🎧 ➡️ https://lnkd.in/esCaDxiy 📽️ ➡️ https://lnkd.in/epJfnUcz #CyberSecurity #CISA #CyberThreats #CyberAttack

8

 "Researchers say U.S. infrastructure providers should harden their defenses against both direct intrusions and supply chain attacks targeting their third-party vendors." https://lnkd.in/gY27eMuY

2

Prime Security, the company that built the first Agentic Security Architect, has raised $20 million in its Series A funding round. The investment was led by Scale Venture Partners, with additional support from Foundation Capital, Flybridge Ventures, and Ofir Ehrlich the CEO and Founder of Eon. The company will use this new funding to grow its market reach and speed up the development of its Agentic Product Security Platform. This platform includes a set of smart AI agents that work automatically to watch, check, and improve product security at every stage of the development process. Michael N. | Dimitry Shvartsman | Danny H. | Matan Markovics 🔗 Read full article link in comment #primesecurity #security #cybersecurity #funding #seriesA #startupnews #businessupdate

22

1 Comment

Most security teams run on a dozen different tools. Crisis detection systems, notification feeds, GSOC dashboards, case management systems, travel risk management platforms, risk models, and site assessment systems. The list goes on. Each one needs location threat intelligence, but few actually have it. That's the problem we built our API to solve. Customers have been loving our API since it was first released, and the use cases keep expanding. Today we're making it official with a dedicated API page on our site that breaks down exactly how security teams integrate Base Operations into their existing tech stack. Here's what it enables: 𝗚𝗦𝗢𝗖 𝘁𝗵𝗿𝗲𝗮𝘁 𝗺𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴. Feed BaseScore and detailed threat breakdowns directly into your operations center. Your analysts get standardized risk context for every location they monitor without switching tools. 𝗖𝘂𝘀𝘁𝗼𝗺 𝗿𝗶𝘀𝗸 𝗺𝗼𝗱𝗲𝗹𝗶𝗻𝗴. Our API provides BaseScore and 16 standardized threat categories at sub-mile granularity. So you can build crime and unrest threats directly into your risk model across every location. 𝗧𝗿𝗮𝘃𝗲𝗹 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗮𝗻𝗱 𝗱𝘂𝘁𝘆 𝗼𝗳 𝗰𝗮𝗿𝗲. Connect local threat data to your travel management platform so you implement policies effectively and provide recommendations to your people. 𝗦𝗶𝘁𝗲 𝗮𝘀𝘀𝗲𝘀𝘀𝗺𝗲𝗻𝘁 𝗮𝗻𝗱 𝗽𝗼𝗿𝘁𝗳𝗼𝗹𝗶𝗼 𝗺𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴. Query and compare threat profiles for any location across 5,000+ cities using the same consistent methodology. Most teams complete integration in 5-30 days. No rebuilding your stack. No 12-month data engineering projects. One REST API that connects once and feeds local intelligence everywhere it's needed. Check out the full API page to explore endpoints, specs, and use cases: https://lnkd.in/endwHPcT

21

2 Comments

Argo Next Generation is the central nervous system for modern Corporate Security Departments. Originally developed for and by our in-house teams, it moves beyond simple "threat feeds" to provide a Private AI Intelligence Platform that solves the primary dilemma for CSOs: how to use powerful AI without exposing sensitive corporate data to the public web. The following briefing details how Argo NG specifically benefits corporate security operations. 1. Data Privacy & Sovereign Security: The most significant benefit to a corporate security department is the Private AI environment. 2. Enhanced GSOC Efficiency: Argo NG acts as a force multiplier for Global Security Operations Centers (GSOCs) by automating the "noise reduction" phase of intelligence 3. Advanced Investigative Tools: The platform integrates several "Next Gen" forensic and investigative capabilities 4. Executive & Travel Protection: For departments managing Executive Protection (EP), Argo NG provides high-fidelity, real-time monitoring.

13