Cybersecurity
Lawmakers Want DHS to Assess National Security Risks of Doxing
Proposed legislation would require the Department of Homeland Security to “evaluate risks posed to national security and civilian privacy” by the online release of individuals’ personal information.
Cybersecurity
Hack on Transportation Systems Exposes Employee Information
The Department of Transportation breach exposed the data of 237,000 current and former employees.
Cybersecurity
US Marshals to Unveil ‘Fully Reconstituted System’ Following Ransomware Attack
Offline since February, the new system will have improved cybersecurity countermeasures.
Cybersecurity
‘Human Error’ Exposed Lawmakers’ Personal Info in DC Health Data Breach
The benefit exchange’s director testified before a House Committee on the ongoing investigation into a data breach exposing DC residents’ and lawmakers’ data.
Cybersecurity
Genesis Black Market Dismantled, But Experts Warn of Potential Vacuum
A major coordinated effort took down the black market for stolen data, but experts warn the fight to secure data is ongoing.
Cybersecurity
Lawmaker and Staffer Health Data Exposed in Insurance Breach
The attack on local insurance company DC Health Link threatens to expose personal information of House lawmakers and Hill staffers.
Cybersecurity
US Marshals Service Hacked in ‘Major Incident’
This is the second time the agency has been hacked in recent years, adding to a growing number of agencies that have experienced cybersecurity incidents.
Cybersecurity
FCC Rule Would Require Telecom Providers to Immediately Disclose Sensitive Data Breaches
The Federal Communications Commission’s proposed rule would require telecommunications providers to immediately notify consumers and federal agencies about any breaches involving “customer proprietary network information.”
Digital Government
A Judge Has Finalized the $63M OPM Hack Settlement. Feds Now Have Two Months to Sign Up for Damages.
So far, more than 19,000 data breach victims are seeking payouts of up to $10,000.
Cybersecurity
FTC's Data Security Complaint Against Drizly Sets New Leadership Responsibility
The consequences of Drizly’s lax security measures could echo past the beverage delivery company.
Cybersecurity
Whistleblower Explains How Twitter Easily Skirted FTC’s Data Security Enforcement
The former public official—and legendary hacker’s—decision to expose what he described as a disastrous security environment at the company has prompted an unlikely alliance in Congress.
Cybersecurity
GAO: HHS Needs Improved Data Breach Reporting
Data breaches have increased each year since 2015.
Digital Government
Jury: Former DHS Watchdog Official Stole Software, Employees’ Personal Info
The verdict is in for the last holdout in a scandalous scheme to defraud the government.
Cybersecurity
Cyber-Incident Reporting Legislation Clears House in Bipartisan Spending Bill
The bill, attached to government funding legislation, now moves to the Senate, which recently passed the same incident reporting provisions separately by unanimous consent.
Ideas
How a Cloud-Security Scaffolding Can Protect Your Multicloud Landscape
Different cloud environments have different security needs. Here’s how to create a cloud-security scaffolding to strengthen protections while reducing manual support.
Cybersecurity
Report Shows Global Financial Giants Are at Risk of Cyberattacks
A new report by Constella Intelligence raises questions as to whether the sector is doing enough to protect itself.
Cybersecurity
DOJ to Hit Government Contractors with ‘Very Hefty Fines’ If They Fail to Disclose Data Breaches
Deputy Attorney General Lisa Monaco promised to use an existing law to go after contractors that don't follow required cybersecurity standards.
Ideas
Prioritizing Breach Prevention for a Secure Government
A more secure government happens when hackers are stopped before they can touch critical data and systems—when a breach is prevented, not mitigated.
Cybersecurity
Survey: Nearly 3 in 4 Organizations Suffered Data Breaches Due to Phishing
More than half of respondents indicated concerns about hybrid work environments and defending against malicious emails.
Ideas