Author Archive
David DiMolfetta
Cybersecurity Reporter, Nextgov/FCW
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta . If you have a tip you'd like to share, David can be securely contacted at djd.99 on Signal.
Cybersecurity
Federal systems increasingly likely to face accidental AI breach after Hugging Face, experts say
Former officials and security experts say aged systems, contractors and agency AI adoption could open similar paths into government networks.
- By David DiMolfetta
Cybersecurity
Voting machine researchers say federal work abruptly ended after Trump ally pushed back on their findings
Mojave Research executives said at DEF CON that the government had been preparing to expand the company’s election security work, and linked Trump adviser Kurt Olsen to pressure they faced after finding election system vulnerabilities but no evidence votes were altered.
- By David DiMolfetta
People
Senate confirms Adam Cassady to run State Department cyberspace bureau
The confirmation comes as the tech diplomacy shop he would traditionally lead in his new role has seen significant reorganizations in the last year.
- By David DiMolfetta
Cybersecurity
New ‘Water Watch Center’ launched to help small utilities stop cyberattacks
The initiative comes as multiple states grapple with intrusions into their water systems that some officials suspect could be tied to Iran.
- By David DiMolfetta
Cybersecurity
CISA cautions against rigid rules for future of cyber vulnerability program
A top agency official said formal backing from Congress could strengthen the global vulnerability-tracking system but warned against measures that may limit its ability to adapt to ever-changing hacking threats.
- By David DiMolfetta
Exclusive
Cybersecurity
CISA still finds water system controls exposed online amid multistate hacks
The agency is working with the FBI to help victims but is not attributing the cyber intrusions to any group, acting director Nick Andersen told Nextgov/FCW.
- By David DiMolfetta
Cybersecurity
AI advances are pushing governments to treat cyberattacks as routine, Western officials say
The remarks underscore a grim outlook for cyberdefenders showing that AI systems are able to exploit vulnerabilities faster than governments can patch them.
- By David DiMolfetta
Artificial Intelligence
OpenAI agents rebuilt internal message board in lead-up to Hugging Face breach
Models in separate experiments used the channel to exchange exploits as they repeatedly compromised OpenAI systems.
- By David DiMolfetta
Cybersecurity
Hugging Face AI breach is ‘most consequential hack’ since Morris Worm, former NSA cyber chief says
AI may let hackers exploit newly disclosed software flaws so quickly that organizations should weigh whether to immediately patch internet-connected devices, even at the risk of causing outages, Rob Joyce said.
- By David DiMolfetta
Artificial Intelligence
Top cyber official wants US open-source AI adopted worldwide
National Cyber Director Sean Cairncross’s remarks come as the White House has excluded open-weight models from voluntary security testing and as new hacking incidents underscored risks posed by autonomous AI.
- By David DiMolfetta
Cybersecurity
Chinese telecom firms kept footholds in US networks despite federal crackdowns, House probe finds
China Mobile, China Telecom and China Unicom retained equipment, data center space and network ties after FCC restrictions, including a China Mobile-linked network that appeared in routes to Salt Typhoon servers.
- By David DiMolfetta
Featured eBooks
Exclusive
Cybersecurity
Lawmakers propose giving 2015 OPM breach victims identity protection for life
The federal government’s coverage for 22.1 million people hoovered up in the China-linked breaches is scheduled to end Sept. 30.
- By David DiMolfetta
Cybersecurity
Cyber industry coalition urges federal action after suspected Iran-linked water hacks
The group called on CISA to impose baseline security standards across federal operational technology systems and pressed Congress to revive several stalled cyber initiatives.
- By David DiMolfetta
People
Greg Barbaccia to return to Palantir after leaving government
The federal CIO’s departure comes after a turbulent period for the federal technology workforce where thousands of technologists left the government.
- By Christian Robles, David DiMolfetta and Alexandra Kelley
Cybersecurity
CISA urges water utilities to take exposed systems down after Minnesota hacks
A memo distributed to water industry members and obtained by Nextgov/FCW makes mention of Iran but does not directly present evidence attributing the latest Minnesota incident to the country.
- By David DiMolfetta
Cybersecurity
Amazon uncovers broad North Korean hacking campaign against open-source software
New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known.
- By David DiMolfetta
People
Senate confirms Clayton as Trump’s next intelligence director
The former SEC chairman will replace acting intelligence chief Bill Pulte, whose brief tenure oversaw repeated personnel cuts to the nation’s top spy office.
- By David DiMolfetta
Policy
FCC blocks approval of new foreign-made robots, power inverters
National security agencies said the devices could create supply-chain vulnerabilities, threaten critical infrastructure and enable surveillance or remote manipulation.
- By David DiMolfetta
People
Pulte announces 30% ODNI staff reduction hours before Clayton vote
The acting intelligence chief said a fifth and “near final” round of terminations was underway Tuesday but did not disclose how many employees were affected.
- By David DiMolfetta
Cybersecurity
After Hugging Face breach, FedRAMP chief tells slow-to-patch vendors to stay out of government
Pete Waterman cited an incident in which OpenAI models escaped a test environment and broke into AI company Hugging Face as evidence that providers must prepare for attacks moving at AI speed.
- By David DiMolfetta