Cybersecurity

CISA, FBI warn of hacking threat against Fortinet product

The advisory warns that an unattributed threat actor is using known vulnerabilities in a Fortinet security product to gain access to government and industry networks.

Cybersecurity

Agency hacks could accelerate push to zero trust security model

Chris DeRusha, the federal chief information security officer, said agencies largely have the tools they need to adopt zero trust security protocols but making a change will "require a shift in mindset."

Cybersecurity

CISA, FBI Officials Say Federal Payroll Facility Was Not Targeted in Hacking Campaigns

CISA’s acting director identified ways the government is working to improve information sharing about cybersecurity incidents between agencies.

Cybersecurity

Senators press for federal agency accountability over SolarWinds

Three top cybersecurity officials struggled to answer questions from lawmakers about who is to blame for the government's failure to stop the breach of nine federal agencies.

Cybersecurity

CISA, FBI Link Exploitation of Microsoft Exchange to Nation-State Actors

The agencies also warned of impending commoditization by criminal groups of access gained through vulnerabilities in the email and calendar service.

Cybersecurity

FBI Director Says Extremists Flocking to Encrypted Apps Poses New Challenges

Christopher Wray told lawmakers tech companies are the ones making policies about encryption.

Cybersecurity

Warner seeks answers from FBI, EPA on Florida water utility breach

The top lawmaker on the Senate Select Committee on Intelligence today sent a letter to the agencies asking for a clearer picture of how hackers attempted to poison a Florida community's water supply and what is being done to prevent a future attack.

Cybersecurity

CISA, FBI Share Recommendations After Water Treatment Hack 

The agencies say updating to the latest operating system is important, even if it wasn’t a factor in this particular incident.

Cybersecurity

Justice Notches Major Win with Global Botnet Takedown

Law enforcement also announced their disruption of the commoditized NetWalker ransomware.

Digital Government

FBI Opens 160 Cases on Capitol Riot with More Expected

The bureau is combing through more than 100,000 pieces of digital media and expects to open more cases for a range of crimes including murder, sedition and theft of national security information.

Digital Government

FBI Calls for Photos, Videos of Insurrectionists at the Capitol

The Department of Justice said some participants will be charged in connection with the riots.

Cybersecurity

White House task force says Russia likely to blame for SolarWinds hack

The Cyber Unified Coordination Group said in a statement on Tuesday that fewer than 10 government agencies have been "compromised by follow-on activity" on federal systems as a result of the hack.

Modernization

Contested FBI wireless contract goes to AT&T

FBI's $92 million emergency operations wireless service contract goes to AT&T after lengthy protest scuffle.

Cybersecurity

CISA, FBI Warn that U.S. Think Tanks Are in Hackers’ Crosshairs

The agencies share guidance for shoring up defenses in a remote work environment that can disguise attackers.

Cybersecurity

Robocalls Told at Least 800,000 Swing State Residents to 'Stay Home' on Election Day. The FBI Is Investigating.

A firm that tracks robocalls said more than 3 million calls were made on Nov. 3, which contained a cryptic message instructing people to “stay safe and stay home.” The tactics join other efforts to confuse voters this election cycle.

Cybersecurity

FBI Director: Feeding DOD’s Cyber Offense Operations Is Crucial to New Strategy

Senator says legislation is moving forward to thwart intellectual property theft from China and defend federal networks from cyberattacks.

Cybersecurity

FBI Fights Intellectual Property Theft from University Offices

Director Christopher Wray noted the importance of attribution in the bureau’s strategy amid growing difficulty investigating cyber crime.

Cybersecurity

Federal Agencies Warn North Korean Hackers Have Upgraded Their Cash-Out Schemes

A joint alert shared details of tactics and malware used by a state subgroup the U.S. government calls the BeagleBoyz.