Author Archive

David DiMolfetta

Cybersecurity Reporter, Nextgov/FCW

David DiMolfetta
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta . If you have a tip you'd like to share, David can be securely contacted at djd.99 on Signal.
Cybersecurity

FBI disrupts intricate North Korean fake-call scheme tied to $400M in crypto theft

Hackers used recordings of trusted contacts to target cryptocurrency holders and software developers. Authorities separately secured court orders covering $1.2 billion stolen from Binance.

Cybersecurity

Nvidia spying allegations test Washington’s defenses against tech espionage

Military investigators say they are helping companies guard against foreign spies. Some executives say that assistance is often one-sided.

Cybersecurity

CISA outlines internal plan to swiftly address cyber, infrastructure threats

Guidance to agency staff outlines what senior officials need to know about major risks, national preparedness and CISA’s ability to respond, using terminology familiar in military and intelligence planning.

Cybersecurity

Trump nominates Palantir security chief Michael LoSapio to lead CISA

If confirmed, the cybersecurity executive would take over an agency rebuilding after workforce cuts and nearly 22 months without a permanent director.

Cybersecurity

CISA updates cyber reporting form as broader incident mandate awaits approval

The agency wants more thorough details about cyberattacks while its long-delayed CIRCIA rulemaking remains under review.

Cybersecurity

Congress returns to slew of cyber deadlines and unfinished AI safety bills

Cyber threat-sharing protections expire Dec. 11, while proposals to oversee advanced AI and strengthen a global vulnerability-tracking program await action.

Exclusive Cybersecurity

CISA’s former Secure by Design chiefs launch their own software safety organization

Lauren Zabierek and Bob Lord helped persuade hundreds of companies to pledge to build safer products. Now they want to evolve that work further.

Artificial Intelligence

Ongoing AI dialogue with China is necessary in coming Congress, top tech lawmaker says

“The Chinese Communist Party doesn’t want rogue AI agents hacking their systems and their water authorities any more than we do,” Rep. James Walkinshaw, D-Va., said Thursday.

Cybersecurity

US agencies warn of refrigeration hacks amid suspected attacks on military bases

Hackers are targeting temperature controls worldwide, officials say. The warning follows Nextgov/FCW reporting that officials suspect Iran-linked hackers were behind freezer failures at military commissaries.

Policy

Democrats’ midterm sweep puts CISA cuts, intelligence disputes under scrutiny

Rep. Bennie Thompson, D-Miss., said House Democrats will investigate how the Trump administration has used DHS. In the Senate, Democrats will also control confirmation hearings for the officials who lead the nation’s security agencies.

People

What the midterm results mean for federal tech policy

A newly blue Congress is expected to conduct oversight on myriad tech, cyber and surveillance issues, ranging from FITARA, to workforce cuts, to data centers and more.

Cybersecurity

Election office reports failed attempts to hack its online services

A state election office also saw five spikes in traffic to its ballot drop box locator on Election Day. By 9:30 p.m. EST, analysts had received no reports of a foreign influence operation.

Cybersecurity

Election security center reports limited threats as voting glitches fuel fraud claims

A bomb threat briefly forced voting outdoors at an Ohio polling place. In New York and Florida, equipment problems prompted unfounded claims that Democrats were interfering with the vote.

Cybersecurity

Binance says fake job interview helped North Korean hackers steal $6.3 billion in crypto

A coding assignment gave attackers access to an engineer’s work computer. They later used an internal AI tool to reach the team responsible for Binance’s digital wallets.

Cybersecurity

Industry groups urge Congress to renew cyber threat-sharing law through defense authorization

Banks, utilities and other industries want lawmakers to extend liability protections through 2035. A stopgap measure currently keeps them in place until Dec. 11.

Cybersecurity

US order to purge Acronis tied to years of scrutiny over Russian ties

Sources say federal oversight of the Swiss cybersecurity firm spanned multiple administrations before culminating in last week's DHS removal order.

Updated Cybersecurity

FBI links $6.3 billion Binance hack to North Korea

Researchers say the hack is the largest cryptocurrency theft on record, raising concerns about North Korea’s ability to finance its government and weapons programs.

Exclusive Cybersecurity

Officials suspect Iran in series of cyberattacks on military base freezers

The attacks, if fully confirmed to be tied to Iran, would demonstrate Tehran’s ability to disrupt certain military-related equipment in the nation.

Cybersecurity

Pentagon investigates suspected cyberattack behind military freezer failures

August outages spoiled food at military commissaries across the nation. Investigators are also examining a similar attack on refrigeration systems in France.

Cybersecurity

DHS leak exposes contact information on intelligence personnel

Exposed details could help foreign intelligence services or criminals identify and track intelligence officials and approach them with messages or calls designed to appear legitimate.