NIST and CISA Release Final Guidance on Protecting Authentication Tokens
NIST and CISA published a final interagency report giving federal agencies and cloud service providers guidelines to protect identity assertions, access tokens, and cryptographic mechanisms behind modern authentication. It updates the draft with feedback on token validation, secrets management, and detection at scale, gathered via CISA's Joint Cyber Defense Collaborative, and supports Executive Order 14306 on secure software development.
Sources and evidence
Summary last validated Sep 15, 2026
Reader actions
Report an issue
Use this for an incorrect summary, wrong source, duplicate story, or wrong category. Submissions are private and do not change the story automatically.
Related coverage
- security
CISA: Chinese Government-linked Hackers Target US Critical Infrastructure
CISA published an advisory stating Chinese government-linked cyber threat actors, enabled by China-based Integrity Technology Group, combine automated scanning, botnets, and hands-on exploitation to steal sensitive data from organizations worldwide, including US critical infrastructure. Tactics include cross-site scripting and password spraying on Microsoft Exchange servers, VPN persistence, and email and credential exfiltration via scripts.
- policy
NIST Joins White House Effort to Drive 'A New Golden Age of Science'
NIST announced it is joining a White House effort aimed at driving what is described as 'A New Golden Age of Science.' The agency said that as the nation's lead agency for measurement science and standards, it is uniquely positioned to bridge the distance between fundamental discovery and industrial capability.
- policy
Anthropic updates Usage Policy with new deceptive activity rules
Anthropic published its 2026 Usage Policy update, effective November 12. The revision clarifies existing rules and adds examples for Claude's longer, more independent work. It consolidates restrictions on fake accounts and fabricated news into a new section, Do Not Engage in Deceptive Campaigns or Artificial Activity, and refocuses the elections section on preventing voter deception and election disruption.
- policy
National Sea Grant Advisory Board sets public meeting agenda
The Federal Register published a notice scheduling a public meeting of the National Sea Grant Advisory Board, a Federal Advisory Committee. Members will discuss and advise on the National Sea Grant College Program, covering program evaluation, strategic planning, education and extension, and science and technology programs. The full agenda is available on the Sea Grant website.
- policy
US Copyright Office Seeks Public Input on Music Streaming Fraud
The US Copyright Office issued a Federal Register notice, document 2026-20537, soliciting public information on music streaming fraud. The request follows a congressional request. The notice does not specify which agency submitted it and provides no further details on scope, deadlines, or how the collected information will be used.