Cybersecurity

Salt Typhoon hacks to influence final round of DARPA’s AI-cyber competition

This summer, seven teams will compete to craft a best-case model that uses AI to detect and fix open-source vulnerabilities in critical infrastructure. Recently discovered Chinese telecom hacks will help shape the final round, a top DARPA official said.

Cybersecurity

People should be ‘outraged’ by efforts to shrink federal cyber teams, former CISA head says

As adversaries like China continue targeting U.S. critical infrastructure, Chris Krebs says we should "make CISA great again" amid expected cuts mounting inside the cyber agency.

Cybersecurity

Forthcoming NIST profile to address growing AI-cyber challenges

The Cyber AI Profile, currently in development, could help firms better prepare for hackers that use AI tools to enhance their cyberattacks, a top NIST official said at the RSAC Conference.

Policy

Justice Dept. rescinds rules safeguarding media from government seizures

The rules, first issued under former Attorney General Merrick Garland, gave members of the press protections from legal mechanisms to obtain sensitive data linked to their reporting.

People

South Dakota CIO to become deputy director at CISA

Madhu Gottumukkala will take over a position that has remained vacant since Nitin Natarajan departed the agency in January.

Cybersecurity

FBI asks public for tips about Salt Typhoon telecom hacks

Salt Typhoon accessed at least nine U.S. telecom firms and their systems that facilitate legal access requests for law enforcement.

Cybersecurity

Top intelligence lawmaker fears China may exploit DOGE’s changes to government

Rep. Jim Himes, D-Conn., also called out the Trump administration on the recent firing of NSA Director Timothy Haugh, a move he viewed as “puzzling.”

Policy

State Department moves cyber and intelligence bureaus under agencywide reorg

Some 15% of the agency’s domestic staff will be eliminated as part of the reorganization announced Tuesday.

Policy

NSF cancels over 400 grants covering disinformation, deepfakes and STEM education

Some $328 million worth of research grants to institutions was canned amid a broader restructuring of the National Science Foundation. Disinformation research and empowerment of underprivileged people in STEM fields were prime targets.

People

CISA officials who led Secure by Design initiative resign

Bob Lord and Lauren Zabierek are the latest to depart the cyber agency, as DOGE-fueled cuts and broader Trump reduction plans have placed it in the crosshairs.

Policy

US urging allies to cease talks with Chinese satellite industry

Internal talking points also give State Department officials guidance on how to respond to allies’ concerns about SpaceX’s Starlink.

Cybersecurity

CISA warns threat hunting staff of end to Google, Censys contracts as agency cuts set in

“We understand the importance of these tools in our operations and are actively exploring alternative tools to ensure minimal disruption,” said the email sent to several hundred CISA cyber threat hunters.

Cybersecurity

Chinese telcos provide backbone for US allies’ mobile traffic, raising espionage concerns

A report from iVerify and other researchers found that mobile networks in countries like Japan, South Korea and New Zealand route telecom traffic through Chinese state-backed infrastructure.

Cybersecurity

Former cyber official Chris Krebs to leave SentinelOne in bid to fight Trump pressure

“For those who know me, you know I don’t shy away from tough fights. But I also know this is one I need to take on fully — outside of SentinelOne,” Krebs said.

Cybersecurity

CISA extends MITRE-backed CVE contract hours before its lapse

“Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services,” an agency spokesperson said.

Updated Cybersecurity

MITRE-backed cyber vulnerability program to lose funding Wednesday

Organizations across industry, government, national security and critical infrastructure rely on the CVE Program, which serves as the de-facto global standard for vulnerability identification and management.

Cybersecurity

User with Russian IP address tried to log into NLRB systems following DOGE access, whistleblower says

The blocked login attempts, detailed in an extensive whistleblower complaint filed to the Senate Intelligence Committee and others, may indicate foreign adversaries have begun leveraging DOGE inroads into sensitive federal systems.

Cybersecurity

Chinese police say NSA hacked networks of Asian Winter Games

The accusations, which name three supposed NSA operatives, come amid escalating trade tensions between the U.S. and China.

Cybersecurity

Top homeland security lawmaker calls for cautious cuts to CISA

“We have to be very careful about who and what we cut, because [the Cybersecurity and Infrastructure Security Agency] does have a mission to overwatch our critical infrastructure and make sure the bad guys aren’t getting in,” said Rep. Mark Green, R-Tenn.

People

Loss of NSA leaders will cause disruptions, agency’s former chief says

Gen. Paul Nakasone praised former NSA Director Timothy Haugh and former NSA Civilian Deputy Director Wendy Noble, who were fired from their positions last week.