Author Archive

David DiMolfetta

Cybersecurity Reporter, Nextgov/FCW

David DiMolfetta
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta . If you have a tip you'd like to share, David can be securely contacted at djd.99 on Signal.
Cybersecurity

Federal systems increasingly likely to face accidental AI breach after Hugging Face, experts say

Former officials and security experts say aged systems, contractors and agency AI adoption could open similar paths into government networks.

Cybersecurity

Voting machine researchers say federal work abruptly ended after Trump ally pushed back on their findings

Mojave Research executives said at DEF CON that the government had been preparing to expand the company’s election security work, and linked Trump adviser Kurt Olsen to pressure they faced after finding election system vulnerabilities but no evidence votes were altered.

People

Senate confirms Adam Cassady to run State Department cyberspace bureau

The confirmation comes as the tech diplomacy shop he would traditionally lead in his new role has seen significant reorganizations in the last year.

Cybersecurity

New ‘Water Watch Center’ launched to help small utilities stop cyberattacks

The initiative comes as multiple states grapple with intrusions into their water systems that some officials suspect could be tied to Iran.

Cybersecurity

CISA cautions against rigid rules for future of cyber vulnerability program

A top agency official said formal backing from Congress could strengthen the global vulnerability-tracking system but warned against measures that may limit its ability to adapt to ever-changing hacking threats.

Exclusive Cybersecurity

CISA still finds water system controls exposed online amid multistate hacks

The agency is working with the FBI to help victims but is not attributing the cyber intrusions to any group, acting director Nick Andersen told Nextgov/FCW.

Cybersecurity

AI advances are pushing governments to treat cyberattacks as routine, Western officials say

The remarks underscore a grim outlook for cyberdefenders showing that AI systems are able to exploit vulnerabilities faster than governments can patch them.

Artificial Intelligence

OpenAI agents rebuilt internal message board in lead-up to Hugging Face breach

Models in separate experiments used the channel to exchange exploits as they repeatedly compromised OpenAI systems.

Cybersecurity

Hugging Face AI breach is ‘most consequential hack’ since Morris Worm, former NSA cyber chief says

AI may let hackers exploit newly disclosed software flaws so quickly that organizations should weigh whether to immediately patch internet-connected devices, even at the risk of causing outages, Rob Joyce said.

Artificial Intelligence

Top cyber official wants US open-source AI adopted worldwide

National Cyber Director Sean Cairncross’s remarks come as the White House has excluded open-weight models from voluntary security testing and as new hacking incidents underscored risks posed by autonomous AI.

Cybersecurity

Chinese telecom firms kept footholds in US networks despite federal crackdowns, House probe finds

China Mobile, China Telecom and China Unicom retained equipment, data center space and network ties after FCC restrictions, including a China Mobile-linked network that appeared in routes to Salt Typhoon servers.

Exclusive Cybersecurity

Lawmakers propose giving 2015 OPM breach victims identity protection for life

The federal government’s coverage for 22.1 million people hoovered up in the China-linked breaches is scheduled to end Sept. 30.

Cybersecurity

Cyber industry coalition urges federal action after suspected Iran-linked water hacks

The group called on CISA to impose baseline security standards across federal operational technology systems and pressed Congress to revive several stalled cyber initiatives.

People

Greg Barbaccia to return to Palantir after leaving government

The federal CIO’s departure comes after a turbulent period for the federal technology workforce where thousands of technologists left the government.

Cybersecurity

CISA urges water utilities to take exposed systems down after Minnesota hacks

A memo distributed to water industry members and obtained by Nextgov/FCW makes mention of Iran but does not directly present evidence attributing the latest Minnesota incident to the country.

Cybersecurity

Amazon uncovers broad North Korean hacking campaign against open-source software

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known.

People

Senate confirms Clayton as Trump’s next intelligence director

The former SEC chairman will replace acting intelligence chief Bill Pulte, whose brief tenure oversaw repeated personnel cuts to the nation’s top spy office.

Policy

FCC blocks approval of new foreign-made robots, power inverters

National security agencies said the devices could create supply-chain vulnerabilities, threaten critical infrastructure and enable surveillance or remote manipulation.

People

Pulte announces 30% ODNI staff reduction hours before Clayton vote

The acting intelligence chief said a fifth and “near final” round of terminations was underway Tuesday but did not disclose how many employees were affected.

Cybersecurity

After Hugging Face breach, FedRAMP chief tells slow-to-patch vendors to stay out of government

Pete Waterman cited an incident in which OpenAI models escaped a test environment and broke into AI company Hugging Face as evidence that providers must prepare for attacks moving at AI speed.