Cybersecurity
DHS leak exposes contact information on intelligence personnel
Exposed details could help foreign intelligence services or criminals identify and track intelligence officials and approach them with messages or calls designed to appear legitimate.
GSA left sensitive information in its Google Drive exposed, watchdog finds
The watchdog previously found in 2014 that the agency had not protected information stored in its Google cloud environment.
DHS personnel leak exposes contact details and sensitive job information
A group calling itself the Department of Peace claimed responsibility for obtaining records on more than 41,000 employees and contractors, citing opposition to immigration enforcement.
FCC commissioner hopes Cyber Trust Mark products reach shoppers within a year
Olivia Trusty is taking charge of the rollout as officials work through testing requirements and oversight for devices carrying the cybersecurity label.
China’s ‘Volt Typhoon’ quietly built another hacking network following US crackdown, new findings say
New research traces a three-year operation targeting government, defense and critical infrastructure networks. Sources say Energy Department facilities and utilities have also been affected.
DHS secretary plans post-election security review
Markwayne Mullin told CISA employees he wants to assess election systems after the vote, as the agency faces scrutiny over cuts to its support for states.
FEC takes down electronic filing platform after attempted hack
The commission holds no role in administering U.S. elections, meaning any impacts to its systems will not affect voting in the upcoming midterms.
White House takes Texas water cybersecurity model to rural hospitals
Project Lifeline 250 will provide free cybersecurity assistance to South Carolina hospitals, extending the administration’s effort to connect vulnerable infrastructure operators with industry support.
NIST issues roadmap for transition to post-quantum encryption standards
The report aims to help organizations take the standards already set out by NIST and create a plan for implementing them, in alignment with the Trump administration’s recent PQC executive order.
CISA gives federal agencies until Thursday to address exploited PHP flaws
The agency’s order adds urgency to a worldwide repair effort, though the extent of successful attacks remains unclear.
CISA plans service review, sharper focus on critical infrastructure threats
The strategy sets a yearlong schedule for reviewing capabilities and reporting progress as the agency rebuilds after staffing cuts.
CISA vulnerability response chief departing agency after nearly six years
Lindsey Cerkovnik helped oversee agency efforts to track software flaws. She plans to start a new role in November.
PHP flaws draw millions of hacking attempts amid global push for fixes
Cloudflare reported millions of attempts to exploit the widely used web software, while researchers warned that compromised sites could also put visitors at risk.
Russia targets Democrats and Ukraine supporters ahead of midterms, top intel lawmakers say
Sen. Mark Warner, D-Va., and Rep. Jim Himes, D-Conn., described Russian disinformation and more targeted Chinese influence efforts during a press roundtable, while reporting better access under intelligence chief Jay Clayton.
US agencies urge fixes for programming language flaws putting millions of web systems at risk
The flaws in the widely used website software known as PHP could expose data and let hackers seize control.
Democrats warn tech firms of election security ‘backsliding’ ahead of midterms
Senior intelligence and election oversight lawmakers want social media companies and AI developers to strengthen safeguards against false voting information, foreign influence campaigns and deceptive AI content.
Exclusive
Senator warns hundreds of federal web addresses may lack key spying protection
The list includes websites for FBI tips, intelligence job applications and the Veterans Crisis Line.
US moves to staff leaders for industry-partnered offensive cyber program
The Trump administration is laying groundwork to enlist companies against foreign cybercriminals, but payment arrangements and protections for participating firms remain unresolved.
Officials see gaps in election communications as AI makes foreign influence easier
Sources describe weakening cooperation between the federal government and state and industry partners ahead of the midterms, as AI gives foreign operatives cheaper ways to produce and spread deceptive messages.
Exclusive
Top Pentagon zero trust official to retire from government this week
Randy Resnick has spent nearly 40 years in federal service and is expected to continue working at a software company as a chief technology officer for government.
