Author Archive

David DiMolfetta

Cybersecurity Reporter, Nextgov/FCW

David DiMolfetta
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta . If you have a tip you'd like to share, David can be securely contacted at djd.99 on Signal.
Exclusive People

House Democrats ask GAO to review CISA workforce cuts

Lawmakers want Congress’ watchdog to assess what capabilities were lost after the cyber agency shed roughly one-third of its staff.

Cybersecurity

DOJ charges 17 Iranians in cybertheft campaign

Prosecutors say the Mabna Institute — which conducted intrusions for Iran’s Islamic Revolutionary Guard Corps, among other campaigns — stole 31.5 terabytes of academic data and breached email accounts at U.S. agencies and companies.

Cybersecurity

The Russian hurdle in Trump’s new offensive cyber program

The White House wants private companies to help take down cybercriminals overseas. But in Russia, the line between criminal hackers and the government is difficult to draw.

Cybersecurity

Federal systems increasingly likely to face accidental AI breach after Hugging Face, experts say

Former officials and security experts say aged systems, contractors and agency AI adoption could open similar paths into government networks.

Cybersecurity

Voting machine researchers say federal work abruptly ended after Trump ally pushed back on their findings

Mojave Research executives said at DEF CON that the government had been preparing to expand the company’s election security work, and linked Trump adviser Kurt Olsen to pressure they faced after finding election system vulnerabilities but no evidence votes were altered.

People

Senate confirms Adam Cassady to run State Department cyberspace bureau

The confirmation comes as the tech diplomacy shop he would traditionally lead in his new role has seen significant reorganizations in the last year.

Cybersecurity

New ‘Water Watch Center’ launched to help small utilities stop cyberattacks

The initiative comes as multiple states grapple with intrusions into their water systems that some officials suspect could be tied to Iran.

Cybersecurity

CISA cautions against rigid rules for future of cyber vulnerability program

A top agency official said formal backing from Congress could strengthen the global vulnerability-tracking system but warned against measures that may limit its ability to adapt to ever-changing hacking threats.

Exclusive Cybersecurity

CISA still finds water system controls exposed online amid multistate hacks

The agency is working with the FBI to help victims but is not attributing the cyber intrusions to any group, acting director Nick Andersen told Nextgov/FCW.

Cybersecurity

AI advances are pushing governments to treat cyberattacks as routine, Western officials say

The remarks underscore a grim outlook for cyberdefenders showing that AI systems are able to exploit vulnerabilities faster than governments can patch them.

Artificial Intelligence

OpenAI agents rebuilt internal message board in lead-up to Hugging Face breach

Models in separate experiments used the channel to exchange exploits as they repeatedly compromised OpenAI systems.

Cybersecurity

Hugging Face AI breach is ‘most consequential hack’ since Morris Worm, former NSA cyber chief says

AI may let hackers exploit newly disclosed software flaws so quickly that organizations should weigh whether to immediately patch internet-connected devices, even at the risk of causing outages, Rob Joyce said.

Artificial Intelligence

Top cyber official wants US open-source AI adopted worldwide

National Cyber Director Sean Cairncross’s remarks come as the White House has excluded open-weight models from voluntary security testing and as new hacking incidents underscored risks posed by autonomous AI.

Cybersecurity

Chinese telecom firms kept footholds in US networks despite federal crackdowns, House probe finds

China Mobile, China Telecom and China Unicom retained equipment, data center space and network ties after FCC restrictions, including a China Mobile-linked network that appeared in routes to Salt Typhoon servers.

Exclusive Cybersecurity

Lawmakers propose giving 2015 OPM breach victims identity protection for life

The federal government’s coverage for 22.1 million people hoovered up in the China-linked breaches is scheduled to end Sept. 30.

Cybersecurity

Cyber industry coalition urges federal action after suspected Iran-linked water hacks

The group called on CISA to impose baseline security standards across federal operational technology systems and pressed Congress to revive several stalled cyber initiatives.

People

Greg Barbaccia to return to Palantir after leaving government

The federal CIO’s departure comes after a turbulent period for the federal technology workforce where thousands of technologists left the government.

Cybersecurity

CISA urges water utilities to take exposed systems down after Minnesota hacks

A memo distributed to water industry members and obtained by Nextgov/FCW makes mention of Iran but does not directly present evidence attributing the latest Minnesota incident to the country.

Cybersecurity

Amazon uncovers broad North Korean hacking campaign against open-source software

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known.

People

Senate confirms Clayton as Trump’s next intelligence director

The former SEC chairman will replace acting intelligence chief Bill Pulte, whose brief tenure oversaw repeated personnel cuts to the nation’s top spy office.