Cybersecurity
Mandiant founder calls Chinese wiretap hack unsurprising
Telecommunications providers have always been an ideal espionage target for foreign adversaries, Kevin Mandia said in an interview.
US charges 2 with running 'Anonymous Sudan' hacking group
Multiple firms, including Amazon, CrowdStrike and Microsoft, aided the Justice Department in efforts that took down Anonymous Sudan’s main tooling in March.
Few software developers employ secure by design training, research finds
The analysis, conducted by Secure Code Warrior, is supported by former White House cybersecurity officials Kemba Walden and Chris Inglis.
Breaking News
CMMC's final rule has now landed
Several other regulatory steps and Congress' 60-day period to review the defense industrial base's new cybersecurity standard still loom before it takes effect.
It’s time to rethink how wiretaps work after Chinese hack, experts say
The FCC sought a briefing from national security officials about the infiltration that was reported last Friday, according to a person familiar with the matter.
Foreign adversaries will aim to discredit results after Election Day, intel officials warn
Select nations, including Cuba, are trying to influence specific congressional races, they added.
DOJ, Microsoft disrupt Russian hackers targeting civil society orgs
The group, likely linked to Russia’s Federal Security Service, has focused on stealing credentials from NGOs and think tanks around the world.
T-Mobile to pay fines, pledges to up upgrade cybersecurity after repeat data breaches
The telecom giant will pay $15.75 million to the Department of Treasury and front an additional $15.75 million for cybersecurity improvements and compliance.
CISA guidance focuses on post-quantum cryptography tools
The guidance nudges federal network operators to adopt automated cryptography discovery and inventory tools as a step in managing post-quantum cryptography updates.
US charges Iranian operatives with hacking Trump campaign
The allegations come 38 days before the November presidential election, as the U.S. has worked to stave off foreign adversaries’ attempts to sow discord into the election process.
New bill seeks to mandate healthcare cybersecurity standards
The proposed legislation, which has the backing of the Department of Health and Human Services, would require the health agency to set and enforce cybersecurity standards for healthcare providers, clearinghouses and other industry players.
House lawmakers question CrowdStrike exec over July IT outage
A major area of scrutiny was whether CrowdStrike’s flagship endpoint tool needed computer kernel access.
Featured eBooks
Exclusive
House bill pitches interagency task force to counter Chinese hacking threats
CISA and FBI leadership would oversee the group, aimed at coordinating federal efforts to stop Chinese cyber intruders from breaching critical infrastructure and other key systems.
4 more nations sign on to US-led counter-spyware agreement
Austria, Estonia, Lithuania and the Netherlands joined the effort that aims to set standards for countering global spyware abuses.
Commerce proposes ban on connected-car tech from China, Russia
The proposed ban stems from a 2019 executive order meant to bolster U.S. supply chains.
GAO to unveil findings on outdated FAA tech systems
The congressional watchdog's forthcoming report will examine legacy air traffic control systems and the agency’s modernization efforts.
New Vanderbilt center aims to place national security students at unexpected government agencies
Ex-NSA chief Gen. Paul Nakasone envisions students at Vanderbilt’s new Institute of National Security pursuing the roles in non-traditional federal offices, a sign of the evolving nature of today’s threats.
Device detonations reveal ‘incredible’ intelligence abilities: ex-NSA chief
“I think about our own supply chains and what we need to be able to do to ensure their integrity,” Paul Nakasone said.
As elections loom, key US cyber policy goals still unfinished, Cyber Solarium report says
Incomplete tasks include creating a cyber national guard system, a real-time cyber threat sharing platform, and a national plan for restoring economic functions after a cyber disaster.
FCC opens applications for $200 million cyber pilot program
The agency has taken numerous steps to enhance U.S. networks’ cyber posture.
