Cybersecurity

Does Einstein need a post-SolarWinds makeover?

A marquee program designed to protect the government against cybersecurity threats is facing new scrutiny in the wake of Solar Winds Orion breach, but analysts say the program was unlikely to have ever stopped the hacking campaign.

Cybersecurity

SolarWinds hack blights the Trump administration's cybersecurity record

The consequences of the SolarWinds Orion hack are far from clear, but analysts and lawmakers say that officials at CISA and NSA made notable strides to improve the government's cybersecurity posture.

Cybersecurity

Mayorkas calls for review of Einstein, CDM

The president-elect's nominee to lead the Department of Homeland Security said he will review the government's two major cybersecurity programs in the wake of the SolarWinds hack.

Cybersecurity

SolarWinds fallout makes secure communications a critical first line of defense

Crisis situations like this one can induce the fog-of-war and lead to tradeoffs during remediation. While we may not know the full extent of the damage for some time, as is always the case in an event like this, we need to stop the bleeding. We must not afford the adversary an easy path to more information.

Cybersecurity

Biden floats $9B boost to TMF as part of funding surge

The incoming Biden-Harris administration announced a $1.9 trillion "rescue" package to help Americans whose incomes have taken a hit from the pandemic, which includes a major uptick in technology spending to secure government systems and spur modernization.

Cybersecurity

Evanina: Number of known SolarWinds victims 'will continue to grow'

A top counterintelligence official today said the number of known federal agencies affected by the SolarWinds hack will likely to continue to rise beyond initial estimates.

Cybersecurity

Judiciary systems compromised in SolarWinds breach

The office that manages the country's electronic judicial filing system this week announced it was exposed to a vulnerability in SolarWinds Orion.

Cybersecurity

CISA: Hackers access to federal networks without SolarWinds

The Cybersecurity and Information Security Agency said on Jan. 6 that there is evidence of suspected hackers are breaching federal networks without exploiting a recently discovered flaw in SolarWinds Orion product.

Cybersecurity

DOJ says it was hit by SolarWinds hackers

The Justice Department today said hackers likely accessed about 3% of email inboxes.

Cybersecurity

White House task force says Russia likely to blame for SolarWinds hack

The Cyber Unified Coordination Group said in a statement on Tuesday that fewer than 10 government agencies have been "compromised by follow-on activity" on federal systems as a result of the hack.

Cybersecurity

Biden promises 'overwhelming focus' on hack recovery

The president-elect called out the Trump administration for failing to prioritize cybersecurity in general, and for "downplaying the seriousness" of the ongoing breach that has hit multiple federal agencies.

Cybersecurity

CISA: SolarWinds' Orion may not be only entry point for hackers

CISA's latest alert suggests hackers may have found other entry points into the federal government's networks than just the IT management software suite.

Cybersecurity

Lawmakers seek details on damage done by the SolarWinds hack

As information trickles out about which federal agencies have been compromised by a sophisticated hacking operation, lawmakers have begun seeking an extensive accounting of what damage has been done.

Cybersecurity

NSC invokes 2016 directive to respond to SolarWinds hack

The National Security Council's announcement to create a special group for coordinating the federal government's response to the SolarWinds hack comes as the list of affected agencies grows.

Cybersecurity

Hack at Treasury and Commerce spurs emergency order from CISA

The Cybersecurity and Infrastructure Security Agency issued an emergency directive late Sunday night after reported breaches at two cabinet agencies. The Department of Homeland Security, CISA's parent agency, also has reportedly been breached.

Cybersecurity

Cyber czar, CISA subpoenas included in must-pass defense bill

Lawmakers are poised to vote on a defense policy bill that would advance dozens of recommendations made by a cyberspace commission.

Cybersecurity

CISA doesn't plan to tackle COVID vaccine disinformation

CISA’s acting director Brandon Wales said his agency is not the right source to counter anticipated disinformation about coronavirus vaccines.

Cybersecurity

Senate proposes $58M boost to CISA's budget to clear out risk assessment backlog

The Senate Appropriations Committee's bill would aim to help CISA reduce an ongoing backlog of vulnerability assessments requested by state and local agencies.

Cybersecurity

Upgraded CDM dashboard to roll out through FY2021

DHS officials say four federal agencies are now using an upgraded Continuous Diagnostics and Mitigation dashboard and they plan to continue implementing the platform elsewhere throughout the fiscal year.

Cybersecurity

Trump fires top DHS cyber official who debunked election misinformation

Chris Krebs is out as the government's top cybersecurity official following a tumultuous election and his agency's campaign to debunk election misinformation.