Author Archive
David DiMolfetta
Cybersecurity Reporter, Nextgov/FCW
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta . If you have a tip you'd like to share, David can be securely contacted at djd.99 on Signal.
Cybersecurity
DHS secretary plans post-election security review
Markwayne Mullin told CISA employees he wants to assess election systems after the vote, as the agency faces scrutiny over cuts to its support for states.
- By David DiMolfetta
Cybersecurity
FEC takes down electronic filing platform after attempted hack
The commission holds no role in administering U.S. elections, meaning any impacts to its systems will not affect voting in the upcoming midterms.
- By David DiMolfetta
Cybersecurity
White House takes Texas water cybersecurity model to rural hospitals
Project Lifeline 250 will provide free cybersecurity assistance to South Carolina hospitals, extending the administration’s effort to connect vulnerable infrastructure operators with industry support.
- By David DiMolfetta
Cybersecurity
CISA gives federal agencies until Thursday to address exploited PHP flaws
The agency’s order adds urgency to a worldwide repair effort, though the extent of successful attacks remains unclear.
- By David DiMolfetta
Cybersecurity
CISA plans service review, sharper focus on critical infrastructure threats
The strategy sets a yearlong schedule for reviewing capabilities and reporting progress as the agency rebuilds after staffing cuts.
- By David DiMolfetta
Exclusive
Artificial Intelligence
Policy proposal would require firms to disclose how they use AI to develop new models
The framework from Americans for Responsible Innovation would give Washington a closer look at AI’s role in developing new models as Jay Clayton’s task force shapes the government’s relationship with developers.
- By David DiMolfetta
Cybersecurity
CISA vulnerability response chief departing agency after nearly six years
Lindsey Cerkovnik helped oversee agency efforts to track software flaws. She plans to start a new role in November.
- By David DiMolfetta
Cybersecurity
PHP flaws draw millions of hacking attempts amid global push for fixes
Cloudflare reported millions of attempts to exploit the widely used web software, while researchers warned that compromised sites could also put visitors at risk.
- By David DiMolfetta
Cybersecurity
Russia targets Democrats and Ukraine supporters ahead of midterms, top intel lawmakers say
Sen. Mark Warner, D-Va., and Rep. Jim Himes, D-Conn., described Russian disinformation and more targeted Chinese influence efforts during a press roundtable, while reporting better access under intelligence chief Jay Clayton.
- By David DiMolfetta
Cybersecurity
US agencies urge fixes for programming language flaws putting millions of web systems at risk
The flaws in the widely used website software known as PHP could expose data and let hackers seize control.
- By David DiMolfetta
Artificial Intelligence
State Department orders ‘super intelligence’ wording across all official communications
An internal cable from the agency extends Trump’s terminology change to emails, speeches, websites and official titles, while preserving legal language and historical records.
- By David DiMolfetta and Jory Heckman
Cybersecurity
Democrats warn tech firms of election security ‘backsliding’ ahead of midterms
Senior intelligence and election oversight lawmakers want social media companies and AI developers to strengthen safeguards against false voting information, foreign influence campaigns and deceptive AI content.
- By David DiMolfetta
Exclusive
Cybersecurity
Senator warns hundreds of federal web addresses may lack key spying protection
The list includes websites for FBI tips, intelligence job applications and the Veterans Crisis Line.
- By David DiMolfetta
Cybersecurity
US moves to staff leaders for industry-partnered offensive cyber program
The Trump administration is laying groundwork to enlist companies against foreign cybercriminals, but payment arrangements and protections for participating firms remain unresolved.
- By David DiMolfetta
Artificial Intelligence
OpenAI bugging case highlights AI’s insider threat problem
Researchers say the alleged recording attempt shows why AI companies need tighter controls on employee access to sensitive information.
- By David DiMolfetta and John Croxton
Cybersecurity
Officials see gaps in election communications as AI makes foreign influence easier
Sources describe weakening cooperation between the federal government and state and industry partners ahead of the midterms, as AI gives foreign operatives cheaper ways to produce and spread deceptive messages.
- By David DiMolfetta
Exclusive
Cybersecurity
Top Pentagon zero trust official to retire from government this week
Randy Resnick has spent nearly 40 years in federal service and is expected to continue working at a software company as a chief technology officer for government.
- By David DiMolfetta
Cybersecurity
FBI disrupts North Korean ‘laptop farm’ used to infiltrate US companies
Agents seized nearly 190 laptops across Texas in a crackdown on fraudulent remote workers whose earnings help fund Pyongyang’s weapons programs.
- By David DiMolfetta
Cybersecurity
Cybersecurity executive who helped hacking victims arrested on federal extortion charges
Ed Dubrovsky’s arrest may be linked to the FBI’s investigation into ShinyHunters. He has built a career advising organizations on cyberattacks and ransom demands.
- By David DiMolfetta
Cybersecurity
FBI arrests another ShinyHunters suspect after massive breach of employee data
The arrest follows action against suspected members in Jordan and the Netherlands as the bureau investigates the theft of its sensitive personnel information.
- By David DiMolfetta