The CSRB needs to become more transparent regarding its membership and the cases it takes on, experts told Congress.

Two years after it was disclosed, the Log4j vulnerability continues to enable North Korean hacking operations.

DHS officials said Lapsus$ is the perfect target for the next CSRB report and described the hacking group's hacks as "ongoing."

Chinese hackers have become increasingly brazen and are doubling down on their efforts to steal intellectual property and compromise sensitive networks, according to National Security Agency cyber…

This could give Beijing the upper hand when carrying out cyberattacks against the U.S. or its other digital adversaries.

The report suggests that even though risk still remains for unpatched organizations, a government-wide response helped drive mediation.

The findings, first reported by CyberScoop, come in the first of three phases for the DHS bug bounty program.

Potential intruders are still scanning for the bug every day, but the company says many vendors have been on top of fixing vulnerable instances of Log4j software.

Private-sector experts say that public-private threat sharing is key.

The meeting will combine tech leaders with feds.