Modernization

NSA warns Russian hackers exploited email flaw

Russian hackers have compromised a longstanding vulnerability in a widely used email delivery software program at least since August of last year, according to an advisory from the National Security Agency.

Cybersecurity

CISA alerts on NSA-discovered Windows 10 flaw

Attackers could use the vulnerability to trick users into installing "updates" from trusted parties that are actually malware.

Cybersecurity

'Technical irregularities' plagued contact chaining at NSA

ODNI's privacy czar said bad data from telecoms irrevocably tainted the contact-chaining process that was at the heart of the NSA's Call Detail Records program.

Cybersecurity

With U.S. cyber policy, clear lanes still hard to come by

The elevation of CISA and maturation of Cyber Command have clarified "big picture" responsibilities for the U.S. government's cyber mission, but private-sector coordination remains a question mark.

Cybersecurity

House passes new stopgap funding bill to avert shutdown

House and Senate appropriators are hopeful they can work out their remaining differences on spending bills in the period after the Thanksgiving recess and before the new continuing resolution expires.

Cybersecurity

ODNI says it does not collect geolocation data under Patriot Act

Intelligence agencies say they haven't used a controversial surveillance law to collect cell location data since a landmark Supreme Court case last year, but reserve the right to do so in the future.

Modernization

NSA says it can collect metadata for encrypted comms

During a hearing to discuss reauthorization for a number of controversial spying authorities, intelligence and law enforcement officials indicated they could sweep up logistical records related to encrypted communications.

Cybersecurity

NSA chief explains new cyber directorate

The National Security Agency's new cyber directorate wants to bridge gaps between government agencies and the defense industrial base, according to the agency's chief Gen. Paul Nakasone.

Cybersecurity

NSA official: 'Dumb' software supply chain attacks still prevalent

Vulnerabilities in the software supply chain may represent a larger cybersecurity threat over the long haul than threats to physical hardware.

Cybersecurity

NSA: Just say no to hacking back

The National Security Agency's chief counsel said organizations that suspect a cyberattack should call Homeland Security or the FBI instead.

Cybersecurity

Data-crunching spies of the future

The U.S. intelligence community is attempting to transform the way it uses and manages digital information.

Cybersecurity

House set to vote on surveillance restrictions

An amendment introduced by Reps. Justin Amash (R-Mich.) and Zoe Lofgren (D-Calif.) would further limit the government's use of foreign surveillance laws to search and use the digital communications of U.S. citizens and residents.

Cybersecurity

Secrecy impinges on surveillance lawsuit against NSA

Government lawyers pressed the court to throw out a lawsuit challenging its "Upstream" surveillance program, saying the plaintiffs can't prove their communications were being collected.

Cybersecurity

DOJ charges former intel contractor with drone leaks

Daniel Everette Hale, a former Leidos contractor, is charged with passing a series of classified documents related to U.S. drone warfare and counterterrorism policy to a reporter.

Digital Government

Senators want answers on expiring NSA surveillance program

A group of senators are asking the National Security Agency for an update on the current status of its controversial bulk telephony metadata collection program.

Cybersecurity

Time for a NSA-Cybercom split? That's classified.

The head of the NSA and Cyber Command told a House panel that a report claiming he recommended splitting leadership of the two entities up after 2020 is "not accurate."

Cybersecurity

Pompeo: Huawei deals threatens info-sharing with allies

Secretary of State Mike Pompeo said countries that fail to heed warnings about Chinese telecommunications provider Huawei are putting their security and information-sharing relationships with the U.S. at risk.

Cybersecurity

Patriot Act updates lurk for Congress

The upcoming expiration of a handful of key provisions in the Patriot Act at the end of the year could set up another battle in Congress over the size and scope of U.S. surveillance authorities.

Cybersecurity

NSA IG says expanded subpoena authorities could help oversight

While discussing the controversial overcollection of phone records, NSA IG Robert Storch said new authorities to compel testimony from companies that participate in such programs could help hold the agency accountable.

Cybersecurity

DOD CIO lags in implementing cyber law

Congress passed landmark cybersecurity legislation in late 2015, but Pentagon agencies have a spotty record of implementation, according to a watchdog report.