Proposed bill would make DOD tell Congress when 'special cyber operations' are taking place

A bipartisan group of lawmakers from the House Armed Services Committee wants to codify a process that is currently done only as a courtesy.

government news

New battle in 'Crypto Wars' heating up in wake of Manchester attack

by Patrick Howell O'Neill • 1 day ago

Formal talks between governments and tech companies are taking place as European countries ratchet up their calls for encryption backdoors.

How phishing emails sent by Russian hackers produce propaganda

by Chris Bing • 1 day ago

A new research report authored by the Citizen Lab shows that hackers with suspected ties to the Russian government play a vital part in international disinformation campaigns.

New report warns of connected-car security dangers

by Shaun Waterman • 1 day ago

Securing the connected, smart and increasingly autonomous cars of tomorrow against hackers and online criminals will only get harder, warns the Cloud Security Alliance.

Bill to reform NSA hacking policy has skeptics in White House

by Shaun Waterman • 2 days ago

The Trump administration has concerns about a proposed reform of the policy process the U.S. government uses when deciding how to handle newly discovered software vulnerabilities known as zero days, said White House Cybersecurity Coordinator Rob Joyce.

The leaked NSA hacking tool that will wreak havoc for years to come

by Chris Bing • 2 days ago

Turns out 'EternalBlue' was a good name for the tool that could cause massive headaches for enterprises in the coming years.

NSA's Rogers asks for big budget bump to separate U.S. Cyber Command

by Shaun Waterman • 3 days ago

The nation's top cyberwarrior bluntly told a House panel Tuesday that it would take a 16 percent increase in U.S. Cyber Command's budget to separate it from the NSA and become a full-fledged combatant command, as lawmakers want.

Committee explores ways to limit social security number use in federal agencies

by Cassie Stephenson • 3 days ago

Witnesses from several federal agencies reported on progress in the reduction of social security number use in the face of increasing hacking and data breach threats.

U.S. cyberwarriors are getting better at fighting ISIS online, says top general

by Chris Bing • 3 days ago

U.S. Army cyber warriors have gotten better at countering ISIS’ digital operations over the last six months, according to Lieutenant General Paul Nakasone, commanding general of Army Cyber Command.

Budget would boost DHS cyber efforts in NCCIC, CDM

by Shaun Waterman • 3 days ago

President Trump's budget proposal, unveiled Tuesday, would boost spending on the Department of Homeland Security's 24-hour digital-attack watch center by almost $50 million and more than double the funding for a governmentwide online security tools program to $279 million.

Target pays out $18.5M to victims of infamous 2013 data breach

by Chris Bing • 3 days ago

New York Attorney General Eric Schneiderman announced the deal, which involved 47 states and is described as the largest multi-state breach agreement in U.S. history.

Mounting evidence points to North Korean group for global ransomware attack

by Chris Bing • 3 days ago

Symantec said it has discovered "strong links" between WannaCry ransomware and the so-called Lazarus Group.

DNI: Chinese hacking against U.S. companies is 'ongoing' but 'significantly reduced'

by Patrick Howell O'Neill • 4 days ago

Dan Coats' assessment reports significant progress on the cyber front between the world's two biggest economies.

FTC pushed from Hill on hacking of smart toys, kids' privacy

by Shaun Waterman • 4 days ago

Federal cybersecurity and privacy protections for children are not keeping up with the burgeoning data collection engaged in by "smart" toys and online games, Sen. Mark Warner said in asking the Federal Trade Commission if the law needs to be changed.

Ukrainian hacker who stole data for insider trading ring sentenced

by Shaun Waterman • 4 days ago

A Ukrainian member of a hacker gang that stole advance copies of electronic press releases from newswire companies got two-and-a-half years in prison for his role in the insider trading scam, which prosecutors say netted about $30 million.

Why reforming the Vulnerability Equities Process would be a disaster

by Dave Aitel • 5 days ago

Op-Ed: The leak of NSA exploits is not the worst that could happen — and trying to reform the policy process the U.S. government uses to decide which vulnerabilities to reveal and patch will not make things better.

As investigation against Assange is dropped, WikiLeaks releases new CIA malware

by Patrick Howell O'Neill • 1 week ago

"Athena" is malware created by a military contractor and used by the CIA.

Should the government stockpile zero day software vulnerabilities?

by Shaun Waterman • 1 week ago

Storm clouds are rising over the U.S. government's policy on software flaw disclosure after the massive WannaCry infection spread using a cyberweapon developed by the NSA, and even former agency leaders say it might be time to take a fresh look at the Vulnerability Equities Process.

Ransomware aimed at South Korea in early 2017 may be work of North Korea, firm says

by Chris Bing • 1 week ago

Private sector intelligence firm Intel 471 has discovered some evidence that adds to the probability that North Korea-based hackers were involved in WannaCry.

Lawmakers introduce bill to shine spotlight on government hacking stockpile

by Chris Bing • 1 week ago

A new bipartisan bill aims to add transparency to the Vulnerabilities Equities Process.

Cyber scorecard leverages rivalry at DOJ agencies

by Shaun Waterman • 1 week ago

The competition between the dozen-plus components was "good natured and healthy."

Continue to CyberScoop.com