Trump sends cyberwar strategy to Congress
The document outlines how the Trump administration will tackle some of the field’s most vexing issues – including launching hacking operations and deterring adversaries.
A cybersecurity power struggle is brewing at the National Security Council
The arrival of national security adviser John Bolton has prompted an attempted power grab by a junior member of the National Security Council, four current officials with knowledge of the matter told CyberScoop.
First-of-its-kind forum on election security gathers state and local officials with feds
The forum was the first of its kind and came about a month after federal spending legislation provided states with $380 million for election security.
Manfra: Private sector on board with more robust DHS cyber strategy
Private firms won’t have any reservations about supporting the more robust cybersecurity strategy that the Department of Homeland Security will soon release, according to the department’s top cyber official.
Prosecutors hand over terabytes of evidence in case against Russian charged with LinkedIn breach
The evidence in the Yevgeniy Nikulin case will take at least two months for defense attorneys to sort through because of the sheer amount of data involved.
Nation-state hackers attempted to use Equifax vulnerability against DoD, NSA official says
An NSA official says 24 hours after Equifax's breach was made public, a nation-state was scanning DoD for unpatched Apache Struts instances.
Election security bill still needs work in some areas, state officials tell Senate sponsors
Six states discussed with the main sponsors of the Secure Elections Act how they would implement the bill.
DHS prepares cross-sector strategy to limit domino effects from big cyberattacks
A forthcoming cybersecurity strategy from the Department of Homeland Security will seek to curb “systemic risk” to critical infrastructure by helping to secure digital tools used across sectors, DHS Secretary Kirstjen Nielsen said.
Microsoft-led industry group pledges to not assist government cyberattacks
The participant companies' principles include not helping any government mount a cyberattack against "innocent civilians and enterprises."
NIST releases updated cybersecurity framework
The new version updates the federal agency's guidelines in several areas, including authentication and identity; cyber risk self-assessments; managing supply chain cybersecurity; and vulnerability disclosure.
DOD official: Automation can save Pentagon from drowning in data
The Defense Department must do more to take advantage of automation tools to avoid drowning in a sea of network data and risk missing cyber threats, according to a top department official.
Bolton will lead charge to replace cybersecurity coordinator, DHS secretary says
The new national security adviser will restructure aspects of the coordinator job, Secretary of Homeland Security Kirstjen Nielsen said.
Supply-chain vulnerabilities are a 'digital public health crisis,' says DHS's Manfra
Persistent supply chain vulnerabilities such as hardware and software bugs “amount to a digital public health crisis” that the government and private sector must work together to resolve, according to the Department of Homeland Security’s top cybersecurity official.
Cybersecurity adviser Rob Joyce to leave White House, return to NSA
The departures of Joyce and Bossert leave big gaps in the Trump administration's cybersecurity expertise.
Russian hackers targeted internet routers worldwide in apparent spy campaign, say U.S. and U.K.
The U.S. and Britain are issuing a joint alert that Russia-backed hackers are targeting internet routers used by offices and residences worldwide.
Congress wants answers on FBI's 'going dark' problem in wake of DOJ IG report
A bipartisan group of House lawmakers wrote to FBI Director Christopher Wray Friday, asking for answers related to the bureau's work around encryption.
Mulvaney: CFPB hit by over 200 data 'lapses'
Mick Mulvaney revealed Thursday that the agency had suffered some 240 “lapses” in data security over an unspecified time period, in addition to a suspected 800 other such incidents.
Pennsylvania moves to replace all paperless voting machines by 2020
Paper records can't be hacked, and Pennsylvania is taking steps to make them an ingredient of all of its voting machines.
GCHQ head says U.K. engaged in cyberwarfare against ISIS
GCHQ head Jeremy Fleming revealed that the U.K. has conducted a proactive cyber campaign against ISIS, touting the notion of using offensive cyberattacks to counter violent extremism.
Former HHS CISO to join voting technology vendor as security lead
The former CISO of the Department of Health and Human Services is taking a role at one of the country's largest voting machine manufacturers as its head of security.