Cybersecurity · Industry brief

This week in cybersecurity from the editors at Cybercrime Magazine [Source: cybersecurit]

The Department of Justice has pursued two False Claims Act settlements against defense contractors for misrepresenting cybersecurity compliance with NIST SP 800-171 requirements. In the first case, a contractor claimed a perfect self-assessment score of 110 but was assessed at negative 170 by the Defense Contract Management Agency, resulting in a settlement; a second aerospace defense contractor paid over $2 million to resolve similar allegations, originating from a qui tam whistleblower action. Over the past five years, DOJ has settled 15 cyber fraud matters totaling over $73.5 million, with Deputy Assistant Attorney General Brenna E. Jenny confirming numerous additional non-public cyber fraud cases are open. Concurrently, the Department of War suspended implementation of Cybersecurity Maturity Model Certification Phase II third-party assessment requirements scheduled for November 2026, citing prohibitive compliance costs and bureaucratic burdens that the Small Business Administration reported are forcing innovative companies out of the Defense Industrial Base. The Department established a CMMC Reform Task Force for a 60-day comprehensive review while maintaining underlying NIST SP 800-171 obligations and self-assessment requirements. Chief Information Officer Kirsten A. Davies emphasized that robust cybersecurity expectations remain despite the pause on third-party certification obligations. [Source: jdsupra]

Bank of America and Stephens raised price targets on CrowdStrike (CRWD) following the company's AI security announcements at its Fal.Con conference. BofA lifted its target to $260 from $230 while maintaining a Neutral rating, highlighting Falcon Guardian as setting the industry standard for AI detection and response. Stephens raised its target to $280 from $260 with an Overweight rating, citing an expanding AI-driven cybersecurity market and benefits from industry consolidation, positioning CrowdStrike as one of a select number of strategic cybersecurity platform providers. CrowdStrike unveiled Falcon Guardian, an AI Detection and Response platform for monitoring AI agents across endpoints, cloud, SaaS, and browser environments, alongside expanded OpenAI and Google Cloud partnerships and a new Agentic Identity Provider for AI access control. [Source: tradingview]