Cybersecurity
Senator asks NSA to update Americans about VPN spying risks
A congressional analysis found foreign spies could trace users by comparing encrypted traffic entering and leaving a VPN server, according to the lawmaker’s office.
Exclusive
Cybersecurity
Pentagon cyber strategy expected as soon as next week, sources say
Officials have previewed a blueprint emphasizing offensive operations, AI adoption and closer industry ties as the military reorganizes its cyber forces.
Cybersecurity
White House launches water cybersecurity pilot in Texas
Project Watershed 250 will stress-test utilities over six months and could serve as a model for protecting water providers nationwide.
Cybersecurity
Trump admin moves to block risky foreign technology from US power grid
A new executive order targets hardware, software and remote-access services and could require operators to isolate or replace equipment already in use.
Cybersecurity
ATF investigating ‘major’ cyber incident after ransomware group claim
The agency says the affected system was isolated from its broader network and eForms platform but has not disclosed whether data was stolen.
Cybersecurity
White House to soon launch water provider cyber protection program
The plans come as several states face water system intrusions from what some official suspect could be linked to Iran.
Cybersecurity
FBI disables China-linked hacking tools used against US agencies
A hacking group used the tools to target networks belonging to NASA, the Federal Reserve, the National Institutes of Health, the U.S. Senate and the departments of Energy, Justice and Health and Human Services.
Cybersecurity
Treasury sanctions Iranian hackers tied to critical infrastructure breaches
Four of the five people named in the cyber action were also charged last week in the Justice Department’s expanded Mabna Institute case.
Cybersecurity
Treasury launches task force to prepare financial sector for quantum cyber threats
The public-private task force will focus on moving financial institutions to quantum-resistant technology and addressing risks created by vendors and digital assets.
Cybersecurity
DOJ charges 17 Iranians in cybertheft campaign
Prosecutors say the Mabna Institute — which conducted intrusions for Iran’s Islamic Revolutionary Guard Corps, among other campaigns — stole 31.5 terabytes of academic data and breached email accounts at U.S. agencies and companies.
Cybersecurity
The Russian hurdle in Trump’s new offensive cyber program
The White House wants private companies to help take down cybercriminals overseas. But in Russia, the line between criminal hackers and the government is difficult to draw.
Cybersecurity
CISA contemplates whether to hire security software buying help
The Cybersecurity and Infrastructure Security Agency issued a sources sought notice that describes its desire to bring in a company that can help manage enterprise license and materials purchases.
Cybersecurity
As warfare becomes engineering, the era of the digital mercenary dawns
The White House revives “privateering for the digital age” by authorizing cyber firms to strike foreign targets.
Cybersecurity
Trump admin empowers private US firms to go after transnational cybercriminals
“By partnering with vetted United States companies subject to the direction and oversight of the Federal Government, we will enhance our ability to counter [transnational criminal organizations’] threats and combat transnational cybercrime, fraud, and other predatory schemes against American citizens,” the memo said.
Cybersecurity
NIST wants to outfit the National Vulnerability Database with AI
The National Institute of Standards and Technology is angling to modernize how it reports and responds to cyber vulnerabilities with the help of artificial intelligence.
Cybersecurity
Federal systems increasingly likely to face accidental AI breach after Hugging Face, experts say
Former officials and security experts say aged systems, contractors and agency AI adoption could open similar paths into government networks.
Cybersecurity
Voting machine researchers say federal work abruptly ended after Trump ally pushed back on their findings
Mojave Research executives said at DEF CON that the government had been preparing to expand the company’s election security work, and linked Trump adviser Kurt Olsen to pressure they faced after finding election system vulnerabilities but no evidence votes were altered.
Cybersecurity
New ‘Water Watch Center’ launched to help small utilities stop cyberattacks
The initiative comes as multiple states grapple with intrusions into their water systems that some officials suspect could be tied to Iran.
Cybersecurity
CISA cautions against rigid rules for future of cyber vulnerability program
A top agency official said formal backing from Congress could strengthen the global vulnerability-tracking system but warned against measures that may limit its ability to adapt to ever-changing hacking threats.
Exclusive
Cybersecurity