The National Security Agency has released two cybersecurity information sheets (CSIs) with best practices to help National Security System (NSS) and Department of Defense (DoD) teleworkers and their systems administrators secure their networks and handle potential compromises. Keep Reading
One leader plans to "continue to practice using" telework "even when it’s not necessary to use in a contingency." Keep Reading
Wray that relationships with other federal agencies, other nations, and the private sector will be critical to the strategy as the FBI will "not only pursue our own actions," but "enable our partners to defend networks, attribute malicious activity, sanction bad behavior, and take the fight to our adversaries overseas." Keep Reading
When NSA and the National Cryptologic Museum Foundation (NCMF) break ground on the proposed Cyber Center for Education and Innovation (CCEI) on the campus of NSA-Washington (NSAW), it will culminate many years of hard work and commitment shared by the two partners. Keep Reading
The Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS) military unit 26165, whose activity is sometimes identified by the private sector as Fancy Bear, Strontium, or APT 28, is deploying malware called Drovorub, designed for Linux systems as part of its cyber espionage operations. Keep Reading
The playbook is not necessarily the same this year, the NSA election threats lead, David Imbordino, and Brig. Gen. William Hartman, the Cyber Command election threats lead, said. Keep Reading
Mobile devices, from smart phones to tablets to fitness trackers, have become intertwined in many people’s lives over the last decade, providing numerous benefits and becoming almost indispensable. Keep Reading
Over recent months, cyber actors have demonstrated their continued willingness to conduct malicious cyber activity against critical infrastructure (CI) by exploiting internet-accessible operational technology (OT) assets. Keep Reading
Nakasone said the goal is to build on lessons learned from 2018 midterm elections for 2020 so the U.S. will, "know our adversaries better than they know themselves." Keep Reading
System owners and administrators are encouraged to follow the mitigation steps in the advisory to reduce risk of being compromised by this actor. Keep Reading
By automating that process, S&T and NIAP offer agencies the ability to quickly, affordably, and reliably determine if their apps meet NIAP’s stringent security requirements. Keep Reading
In an effort to better protect the U.S. defense industrial base from malware-based threats, the National Security Agency has launched a pilot program on securing Domain Name System use for U.S. defense contractors. Keep Reading
Because of COVID-19, many U.S. Government employees and military service members are working from home to provide continuity of government services. Malicious cyber actors are taking advantage of this. Keep Reading
A code obfuscation tool that’s been linked to Chinese-based hackers has been used in tandem with an implant that has been attributed to Equation Group, a hacking faction that is broadly believed to have ties to the National Security Agency. Keep Reading
National Security Agency guide details whether popular collaboration services offer security features such as multi-factor authentication, transparency on which users are joining sessions, and end-to-end encryption. Keep Reading
“It was truly an honor to be able to serve this agency and play a part in keeping our nation safe. This has easily been the best job I have had,” Gerstell said in an email. Keep Reading
The National Security Agency’s chief information officer may be unsure of what they’re supposed to be doing with attention being pulled disproportionately toward cybersecurity issues, according to the agency’s inspector general. Keep Reading
DHS’s Cybersecurity and Infrastructure Security Agency (CISA) subsequently released an emergency directive on Tuesday afternoon requiring all agencies to implement Microsoft’s patch by Jan. 29. Keep Reading
OIG focused on the effectiveness of age-off controls implemented in one of NSA’s largest SIGINT repositories to ensure data is retained only for the period of time authorized under legal and policy requirements. Keep Reading
A quarter-century and many research dollars later, the world still hasn’t created a quantum computer capable of breaking public-key encryption. Keep Reading