Cybersecurity

DHS Contract Expands Anti-Hacker EINSTEIN Protection to Every Agency

The deal was inked to complete a goal of making so-called EINSTEIN 3A network protections available to all civilian agencies by Dec. 31.

Cybersecurity

OPM Says Dead Federal Employees Also Need ID Theft Protection

The agency is mailing about 300,000 notification letters addressed to the departed

Cybersecurity

Lawmakers Want National Security Damage Assessment on OPM Hack

The House version of the 2016 Intelligence Authorization Act mandates a report on whether the hack disrupted overseas operations.

Cybersecurity

Secret DHS Audit Could Prove Governmentwide Hacker Surveillance Isn’t Really Governmentwide

The intrusion-prevention system, named EINSTEIN 3 Accelerated, garnered both ridicule and praise following the OPM hack.

Cybersecurity

New Pentagon Website Can Tell If You Were Hacked by China

Launched Nov. 17, "OPM Verify" is a public, self-confirmation tool for the 21.5 million victims of the Office of Personnel hack who have not yet received notification letters or need additional help.

Cybersecurity

OPM, DHS, White House Declined to Brief House Armed Services Panel on Historic Hack

The conversation would have been documented for the record.

Cybersecurity

OPM Hunting for Second New Cyber Official Since the Big Hack

The position marks the second new OPM information security role created since the agency disclosed the breach in June.

Cybersecurity

Should ID Theft Protection Be a Standard Federal Employee Benefit?

OPM and the U.S. Postal Service both provided credit monitoring to personnel after breaches at their respective agencies.

Cybersecurity

OPM Says It Breaks Encryption to Monitor Employees' Browsing Habits

Through a technique called "SSL decryption," the agency sees through secure online transactions between a worker’s computer inside the agency firewall and an external website.

Cybersecurity

OPM: ‘There’s No Way’ to Isolate Background Check Systems from the Internet

"Air-gapped" computers are used by defense organizations, nuclear power plants and other environments that require the tightest security.

Cybersecurity

OPM to Fully Do Away with Passwords for Network Access – In 2 Years

Today, all OPM employees need a smart card for network access, but not for all users outside of the agency.

Cybersecurity

Pentagon Hires Investigators to Find Hacked Feds

A tool for determining why mail notifications are returned must be running by Oct. 9 and a website for individuals to check if they're affected by the breach must be running by Nov. 17.

Cybersecurity

Federal Inspectors Want to Double-Check How Agencies Fared During ‘Cyber Sprint’

Ground-truthing is partly a way for IGs to maintain a role in information security oversight, now that DHS is in charge.

Cybersecurity

OPM’s IT Security Overhaul Remains Under Scrutiny

In a new report made public today, the agency’s internal watchdog blasts the agency for dismissing the findings of an emergency report issued earlier this summer.

Cybersecurity

DHS: Here’s Why Agencies Should Not Try to Boot Hackers by Themselves

The OPM hack as a teachable moment.

Cybersecurity

NSA Stepped In to Thwart OPM Hackers -- Eventually

It wasn't until after the intrusion NSA was able to provide OPM with help to try to figure out what had happened, NSA Director Adm. Michael Rogers said.

Cybersecurity

The Nation’s 24-Hour Cyber Watch Center Still Has Some Empty Seats

The National Cybersecurity and Communications Integration Center might have some communication challenges.