#policy
All CosmicBytez Labs articles tagged #policy, across news, security advisories, how-to guides, and projects.
- News
Senate Passes Healthcare Cybersecurity Bill After 190 Million Impacted by Change Healthcare Breach
The Senate unanimously passed a bill setting minimum cybersecurity standards for healthcare entities, driven by the Change Healthcare breach.
- News
Former NSA Chief Nakasone Says Agency Overhaul Is 'Probably Needed'
Paul Nakasone backs NSA's reported five-center reorg to counter faster AI-driven threats, but warns an aging workforce could undercut execution.
- News
Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity
Senate unanimously passes S. 3315, mandating MFA, pen testing, and HIPAA updates after 730+ breaches hit 270M Americans.
- News
China and US Agree to Establish AI Safety Channel, Continue Trade and Military Talks
After a three-day Trump-Xi summit, the US and China agreed to a new AI incident channel, military crisis talks, and a two-month trade truce extension.
- News
OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure
OpenAI disclosed agents touched SEC and Census sites; Transluce found a failed hack on an Education Dept. page plus activity at DOJ, Commerce, and 5 states.
- News
How Tax Policy Could Help Stop Threat Actors From Breaching US Water Systems
An op-ed argues Congress should clarify existing tax incentives, not new grant programs, to fund cybersecurity at cash-strapped water utilities now.
- News
Lawmakers Introduce Bill for Voluntary Telecom Cyber Rules After Salt Typhoon Hacks
Sens. Mark Warner and Ted Cruz introduced a bill creating a voluntary, NTIA-led telecom cybersecurity framework in response to the Salt Typhoon hacks.
- News
Pentagon Cyber Chief: 'The Demand Far Exceeds Supply'
DoD cyber policy chief Katie Sutton says commander requests for cyber operations now outstrip capacity, eight years after gaining offensive authority.
- News
Bipartisan Senate Bill Targets Telecom Cybersecurity After Salt Typhoon
Sens. Mark Warner and Ted Cruz introduced a bipartisan bill creating an NTIA-led telecom cybersecurity working group in response to Salt Typhoon.
- News
How Tax Incentives Could Shield US Water Utilities From Cyberattacks
A new op-ed argues federal tax incentives under the One Big Beautiful Bill could fund water utility cybersecurity faster than new federal programs.
- News
After Water Attacks, Congress Pitches Its Own AI Cyber Defense Pilot
Gottheimer's $100M CISA bill would give water utilities free AI tools, rivaling the White House's Texas pilot.
- News
House Democrats Push CISA Force Structure Assessment Act After ~1,000 Employee Exodus
New legislation would force a top-to-bottom review of CISA's staffing, training, and readiness after roughly 1,000 departures.
- News
Congress Eyes New Support for Cyber Command After Recent Suicide Deaths
Lawmakers push NDAA mental-health provisions for Cyber Command after a cluster of suicides among military and civilian cyber operators.
- News
EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media
Von der Leyen warns AI could unleash unprecedented hacking as the EU unveils the Kids Act, a tiered age system for social media.
- News
USPS Rushes to Finalize Mail Ballot Regulations Ahead of SCOTUS Ruling
The Postal Service is finalizing federal mail ballot rules before SCOTUS decides, raising election integrity and state authority concerns.
- News
UK Cyber Pledge Draws Only a Handful of Top Firms Despite Ministerial Appeal
The UK government's voluntary Cyber Resilience Pledge attracted fewer than 15 of Britain's 350 largest listed companies despite eight months of direct...
- News
OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI
GPT-5.6 Sol scores 96.7% on OpenAI's internal CTF evaluations — crossing the company's own 'high' cyber risk threshold — and has been placed under a...
- News
Maine Closes Data Breach Portal to the Public After Fake Reports
The Maine Attorney General's office has suspended public access to its data breach notification portal after discovering that bad actors were abusing it...
- News
EU Unveils Tech Sovereignty Package to Cut Reliance on US and Chinese Suppliers
The European Commission has unveiled a sweeping technology sovereignty package combining a Chips Act 2.0, a Cloud and AI Development Act (CADA), an Open…
- News
Trump Considers Palantir CTO Shyam Sankar to Lead CISA
Shyam Sankar, the chief technology officer at Palantir Technologies, has emerged as the leading contender for the long-vacant CISA director role under the…
- News
Microsoft Says It Will Not Pursue Security Researchers After Zero-Day Backlash
Following intense backlash from the security research community over Microsoft's removal of GitHub researcher accounts and statements labeling zero-day…
- News
Can Laws Stop Deepfakes? South Korea Aims to Find Out
South Korea's upcoming local elections will serve as a real-world test of whether aggressive anti-deepfake legislation can meaningfully curb AI-generated...
- News
Here's How the FTC Plans to Enforce the Take It Down Act
The FTC will levy hefty fines and pursue investigations against platforms that fail to remove non-consensual intimate imagery, including AI-generated...
- News
CISA Loses 62% of Workforce as DHS Shutdown Guts America's
A partial DHS shutdown since February 14 has furloughed 1,453 of CISA's 2,341 employees, halting vulnerability scanning, threat advisories, and critical...
- News
International AI Safety Report 2026 Warns of AI-Driven
The second International AI Safety Report, authored by 100+ experts and backed by 30+ countries, finds increasing evidence of AI being weaponized for...
- HOWTO
SentinelOne Application Control Policies
Organizations face security risks from unauthorized applications, malware disguised as legitimate software, and shadow IT installations that bypass...
- HOWTO
SentinelOne Control vs Complete Feature Comparison
This document provides a comprehensive comparison between SentinelOne Singularity Control and Singularity Complete SKUs to help MSP teams understand the...
- HOWTO
SentinelOne Create and Manage Exclusion Policies
SentinelOne exclusion policies allow security teams to prevent false-positive detections and performance issues by excluding specific files, folders,...
- HOWTO
SentinelOne Data Retention and Storage Management
Organizations using SentinelOne Singularity Complete receive 14-365+ days of Deep Visibility EDR data retention by default. This historical telemetry...
- HOWTO
SentinelOne Deep Visibility Threat Hunting
Deep Visibility is SentinelOne's EDR telemetry engine that provides comprehensive endpoint data collection for threat hunting, incident investigation, and...
- HOWTO
SentinelOne Deploy Agent Manual Installation
Manual SentinelOne agent installation is used when automated deployment methods (GPO, RMM, SCCM) are unavailable or when installing on standalone...
- HOWTO
SentinelOne Deploy Agent via Group Policy
Deploying SentinelOne agents across Windows endpoints at scale using Active Directory Group Policy Objects (GPO) enables centralized, automated agent...
- HOWTO
Deploy SentinelOne Policy
Deploy, manage, and validate SentinelOne security policies across your endpoint estate using the SentinelOne Management API. This automated workflow supports:
- HOWTO
SentinelOne Device Control: Block USB & Bluetooth Devices
How to block USB drives and Bluetooth peripherals with SentinelOne Device Control — audit in Monitor mode, then enforce allow/block policies safely.
- HOWTO
SentinelOne Firewall Control Management
Traditional endpoint protection focuses on file-based malware, but network-based attacks (lateral movement, command-and-control callbacks, port scanning,...
- HOWTO
SentinelOne Forensics Rollback and Remediation
This document provides comprehensive procedures for forensic evidence collection, ransomware rollback, and threat remediation using SentinelOne Complete...
- HOWTO
SentinelOne Health Check: Agent Status Monitoring Guide
Organizations deploying SentinelOne endpoint protection require continuous monitoring of agent health to ensure comprehensive threat coverage across their...
- HOWTO
SentinelOne MSP Client Onboarding
This runbook provides a standardized process for onboarding new MSP clients to SentinelOne Singularity Complete. Following this methodology ensures...
- HOWTO
SentinelOne Policy Configuration Best Practices
This guide provides comprehensive best practices for configuring SentinelOne policies in MSP environments managing multiple client sites with Singularity...
- HOWTO
SentinelOne PowerShell API Automation
The SentinelOne Management Console REST API enables automation of administrative tasks, reporting, threat response, and integration with existing security...
- HOWTO
SentinelOne PowerShell Automation Scripts
This document provides a comprehensive library of production-ready PowerShell scripts for automating SentinelOne operations in an MSP environment. These...
- HOWTO
SentinelOne Purple AI Usage Guide
Security Operations Centers (SOCs) face overwhelming alert volumes, complex threat investigations, and resource constraints. Analysts spend hours writing...
- HOWTO
SentinelOne Ranger Network Discovery and IoT Visibility
Modern enterprise networks contain a complex mix of managed endpoints (workstations, servers), IoT devices (IP cameras, printers, smart building systems),...
- HOWTO
SentinelOne Remote Shell Operations
Full Remote Shell is a SentinelOne Complete feature that provides authorized administrators with secure, native command-line access to managed endpoints...
- HOWTO
SentinelOne RMM Integration Guide
This runbook provides comprehensive guidance for integrating SentinelOne Singularity Complete with NinjaRMM and other RMM platforms. Proper RMM...
- HOWTO
SentinelOne STAR Advanced Automation and Watchlists
Security teams face the challenge of detecting organization-specific threats, insider threats, and policy violations that generic detection rules cannot...
- HOWTO
SentinelOne STAR Custom Detection Rules
Storyline Active Response (STAR) is SentinelOne's cloud-based automated hunting, detection, and response engine that allows security teams to create...
- HOWTO
SentinelOne Threat Investigation Workflow
When SentinelOne detects a threat on an endpoint, security analysts must quickly investigate the alert to determine if it's a genuine malware infection,...