NSA

Hackers used legit remote monitoring software to hack agency networks

Guidance from the National Security Agency and the Cybersecurity and Infrastructure Security Agency describe a phishing attack on a federal employee that used fake help desk domains to gain access to at least two federal civilian executive branch networks.

CACI's $2.4B NSA win faces challenges

The National Security Agency will take another look at bids after a pair of protests.

NSA to get binding operational directive authority under new cyber policy

A new memo signed by President Biden outlines how the May 2021 executive order on cybersecurity applies to national security systems.

GAO backs Microsoft's protest of $10 billion NSA cloud award to AWS

The Government Accountability Office agreed that aspects of the National Security Agency's evaluation of a major cloud award were "unreasonable."

IC leaders drill in on diversity issues at House hearing

Although there have been some gains in the representation of women and minorities in the IC workforce overall, the highest ranks are less diverse.

CISA chief: Cyber incident reporting can't become a burden

Jen Easterly, the director of the Cybersecurity and Infrastructure Security Agency, stressed the importance of cyber incident reporting but said mandates should be careful of potentially overburdening companies -- and CISA -- with "reporting noise."

Chris Inglis scopes out cyber turf

The newly installed National Cyber Director offered his take on the roles and responsibilities of his office, the Cybersecurity and Infrastructure Security Agency, the National Security Council and agency IT and security operations in responding to federal cyber incidents.

Microsoft touts top secret cloud ATO

Azure Government Top Secret is now "generally available" for national security workloads, Microsoft announced in a blog post.

CISA predicts cyber EO will drive progress on zero trust

Most agencies are just getting started creating plans around zero trust, but tight deadlines featured in President Joe Biden's cybersecurity executive order and a wave of new guidance, may speed up implementation across the entire government.

Does the U.S. need a cyber force?

Gen. Paul Nakasone, the director of the National Security Agency and head of U.S. Cyber Command, told lawmakers that infrastructure deficits could prevent the creation of a service modeled on Space Force.

Moultrie's cyber background clears path to confirmation

President Joe Biden's pick to lead the Defense Department's intelligence and security office, Ronald Moultrie, appears to have a smooth path to Senate confirmation thanks in large part to his cybersecurity experience.

Why zero trust is having a moment

Improved technologies and growing threats have agencies actively pursuing dynamic and context-driven security.

White House stands down groups tackling SolarWinds, Microsoft Exchange

The move comes days after the administration sanctioned Russia for its alleged role in the cyberattacks

Nakasone deflects senators' invitations to seek domestic spying powers

Lawmakers have continued to prod the NSA chief to request new surveillance authorities that might prevent another SolarWinds-type breach.

Microsoft patches new Exchange CVEs, credits NSA with discovery

The new vulnerabilities found in Exchange servers running on-premises are separate from zero-day exploits discovered and announced in March.

ODNI plans recruitment ad campaign

Intelligence agencies are seeking STEM employees and a more diverse workforce.

Changes coming to federal cyber in wake of massive breach

The supply chain hack that targeted IT management software SolarWinds and other vendors will result in changes to the federal government's cybersecurity posture, according to the official charged with leading the administration's response.