Cybersecurity
CISA updates cyber reporting form as broader incident mandate awaits approval
The agency wants more thorough details about cyberattacks while its long-delayed CIRCIA rulemaking remains under review.
Congress returns to slew of cyber deadlines and unfinished AI safety bills
Cyber threat-sharing protections expire Dec. 11, while proposals to oversee advanced AI and strengthen a global vulnerability-tracking program await action.
Exclusive
CISA’s former Secure by Design chiefs launch their own software safety organization
Lauren Zabierek and Bob Lord helped persuade hundreds of companies to pledge to build safer products. Now they want to evolve that work further.
US agencies warn of refrigeration hacks amid suspected attacks on military bases
Hackers are targeting temperature controls worldwide, officials say. The warning follows Nextgov/FCW reporting that officials suspect Iran-linked hackers were behind freezer failures at military commissaries.
Election office reports failed attempts to hack its online services
A state election office also saw five spikes in traffic to its ballot drop box locator on Election Day. By 9:30 p.m. EST, analysts had received no reports of a foreign influence operation.
Election security center reports limited threats as voting glitches fuel fraud claims
A bomb threat briefly forced voting outdoors at an Ohio polling place. In New York and Florida, equipment problems prompted unfounded claims that Democrats were interfering with the vote.
Binance says fake job interview helped North Korean hackers steal $6.3 billion in crypto
A coding assignment gave attackers access to an engineer’s work computer. They later used an internal AI tool to reach the team responsible for Binance’s digital wallets.
Industry groups urge Congress to renew cyber threat-sharing law through defense authorization
Banks, utilities and other industries want lawmakers to extend liability protections through 2035. A stopgap measure currently keeps them in place until Dec. 11.
US order to purge Acronis tied to years of scrutiny over Russian ties
Sources say federal oversight of the Swiss cybersecurity firm spanned multiple administrations before culminating in last week's DHS removal order.
Updated
FBI links $6.3 billion Binance hack to North Korea
Researchers say the hack is the largest cryptocurrency theft on record, raising concerns about North Korea’s ability to finance its government and weapons programs.
Exclusive
Officials suspect Iran in series of cyberattacks on military base freezers
The attacks, if fully confirmed to be tied to Iran, would demonstrate Tehran’s ability to disrupt certain military-related equipment in the nation.
Pentagon investigates suspected cyberattack behind military freezer failures
August outages spoiled food at military commissaries across the nation. Investigators are also examining a similar attack on refrigeration systems in France.
DHS leak exposes contact information on intelligence personnel
Exposed details could help foreign intelligence services or criminals identify and track intelligence officials and approach them with messages or calls designed to appear legitimate.
GSA left sensitive information in its Google Drive exposed, watchdog finds
The watchdog previously found in 2014 that the agency had not protected information stored in its Google cloud environment.
DHS personnel leak exposes contact details and sensitive job information
A group calling itself the Department of Peace claimed responsibility for obtaining records on more than 41,000 employees and contractors, citing opposition to immigration enforcement.
FCC commissioner hopes Cyber Trust Mark products reach shoppers within a year
Olivia Trusty is taking charge of the rollout as officials work through testing requirements and oversight for devices carrying the cybersecurity label.
China’s ‘Volt Typhoon’ quietly built another hacking network following US crackdown, new findings say
New research traces a three-year operation targeting government, defense and critical infrastructure networks. Sources say Energy Department facilities and utilities have also been affected.
DHS secretary plans post-election security review
Markwayne Mullin told CISA employees he wants to assess election systems after the vote, as the agency faces scrutiny over cuts to its support for states.
FEC takes down electronic filing platform after attempted hack
The commission holds no role in administering U.S. elections, meaning any impacts to its systems will not affect voting in the upcoming midterms.
White House takes Texas water cybersecurity model to rural hospitals
Project Lifeline 250 will provide free cybersecurity assistance to South Carolina hospitals, extending the administration’s effort to connect vulnerable infrastructure operators with industry support.
