Cybersecurity
FBI arrests another ShinyHunters suspect after massive breach of employee data
The arrest follows action against suspected members in Jordan and the Netherlands as the bureau investigates the theft of its sensitive personnel information.
Cybersecurity
FBI removes Accenture contractor after missed security patch led to breach
The bureau’s cyber chief blamed a contractor’s failure to apply an available fix for an intrusion that may have exposed sensitive employee information.
Cybersecurity
Pentagon personnel breach — undetected for months — renews cyber standard scrutiny
Unauthorized users accessed sensitive records for roughly nine months before discovery, exposing another government personnel data fiasco as the FBI confronts its own breach incident.
Cybersecurity
FBI warns ShinyHunters members to come forward after alleged leader’s arrest
“You know how to find us, and we know how to find you,” said Brett Leatherman, assistant director of the FBI’s Cyber Division. “I suggest you reach out first while the choice is still yours.”
Cybersecurity
ShinyHunters says it won’t publish FBI data
The group’s new statement — which called the incident a “marketing campaign" — follows reports that the stolen material includes medical records and details about employees working in sensitive intelligence roles.
Cybersecurity
ATF investigating ‘major’ cyber incident after ransomware group claim
The agency says the affected system was isolated from its broader network and eForms platform but has not disclosed whether data was stolen.
Exclusive
Cybersecurity
DHS network intrusion was twice ruled a false positive before breach confirmed
Suspicious activity on the Homeland Security Information Network, which is being used to support World Cup games around the U.S., was first detected around mid-to-late May.
Cybersecurity
House Homeland committee seeks briefing on DHS network hack
Cyber intruders accessed the unclassified network being used to help support World Cup games around the U.S., a senator said last week.
Exclusive
Cybersecurity
Hackers breached DHS information-sharing network, people familiar say
The Homeland Security Information Network is used by government, international and private sector partners to share sensitive but unclassified information.
Cybersecurity
Salt Typhoon hackers exploited stolen credentials and a 7-year-old software flaw in Cisco systems
The Chinese hacking collective has widely leveraged vulnerabilities in communications infrastructure to breach dozens of telecom providers in the U.S. and overseas.
Cybersecurity
Lawmakers request briefing from Treasury secretary on Chinese hack
The compromised third-party offering was a commercial remote services tool not listed in the marketplace for FedRAMP, the government’s cloud security compliance framework.
Cybersecurity
Chinese-sponsored hackers accessed Treasury documents in ‘major incident’
The incident comes in the final days of the Biden presidency and as officials work to root out China-tied hackers from U.S. telecommunications systems.
Cybersecurity
CISA infrastructure tool targeted in January breach, agency says
Sensitive information on the chemical security assessment platform was accessed, though it may not be up to date.
Cybersecurity
VA is warning veterans about Change Healthcare cyberattack, secretary says
“There’s no confirmation yet” that veterans’ data was leaked by the ransomware attack, according to the VA secretary, but the department is proactively alerting millions of veterans and beneficiaries to be safe.
Cybersecurity
The Pentagon is notifying individuals affected by 2023 email data breach
The exposed contents were not secured with a password at the time of their compromise.
Cybersecurity
Okta breach includes theft of data on nearly all help desk users, including some feds
The company revised its earlier reporting on the scope of the breach, but said that data on users of high-impact federal and DOD systems was not compromised.
Cybersecurity
SEC sues SolarWinds for allegedly fraudulent cybersecurity statements
The company says it will "vigorously oppose" the lawsuit.
Cybersecurity
Vacant White House cyber post draws concern amid global software breach
In the aftermath of a global cyberattack exposing personal data on millions of Americans, calls are growing for the White House to fill the top slot at the Office of the National Cyber Director.
Cybersecurity
No 'systemic risk' to government networks from latest breach, CISA says
The nation’s cyber defense agency confirmed it was providing assistance to several federal agencies that have been impacted in an apparent global cyberattack.
Digital Government