Defense Systems

HASC adds cybersecurity subcommittee

Rep. Jim Langevin (D-R.I.) will chair a new subcommittee of the House Armed Services Committee focused on cybersecurity, emerging tech and information systems.

Defense Systems

State Department can't justify opening cyber office, GAO finds

The Government Accountability Office says the State Department failed to justify the scope and organizational placement of a new office that was greenlighted in the final days of the Trump administration.

Defense Systems

In search of a smarter Einstein

If the Einstein intrusion detection system was unlikely to have detected the malware that was delivered via the SolarWinds Orion update, how can it be fixed?

Defense Systems

Lawmakers press NSA for answers about 2015 Juniper hack

A group of Democratic lawmakers is calling on the NSA to explain its part in developing a flawed encryption algorithm that was used and subsequently exploited through Juniper Network's security products, citing the supply chain hack involving SolarWinds Orion.

Defense Systems

Cyber Guard bill gets new life

The bill would allow states to use the National Guard for the purpose of bolstering their cybersecurity.

Defense Systems

Trump issues last-minute order targeting foreign cyber threats

A Jan. 19 executive order from Donald Trump in the waning hours of his presidency aims to force cloud providers to keep more complete records about their customers to support U.S. investigations of hacks and other computer crimes.

Defense Systems

Rob Joyce to lead NSA cyber office

Joyce's predecessor, Anne Neuberger, is joining President-elect Joe Biden's administration as a deputy national security advisor.

Defense Systems

FireEye not ready to name Russians as SolarWinds attackers

The company has not seen enough evidence to positively trace the hackers behind the ongoing SolarWinds Orion hack to Russian entities, a FireEye executive said.

Defense Systems

Russia behind SolarWinds hack, intel agencies claim

According to a Jan. 5 statement from the Cyber Unified Coordination Group, “an Advanced Persistent Threat actor, likely Russian in origin, is responsible for most or all of the recently discovered, ongoing cyber compromises of both government and non-governmental networks."

Defense Systems

Evanina: SolarWinds victims numbers 'will continue to grow'

A top counterintelligence official today said the number of known federal agencies affected by the SolarWinds hack will likely to continue to rise beyond initial estimates.

Defense Systems

SolarWinds hackers accessed DOJ email

Suspected Russian intelligence agents are believed to have accessed "around" 3% of email inboxes, but not any classified systems, according to a Justice Department spokesman.

Defense Systems

Hackers breaking into networks without SolarWinds, CISA says

The Cybersecurity and Infrastructure Security Agency says hackers are breaching federal networks by exploiting methods besides the SolarWinds Orion vulnerabilities.

Defense Systems

White House task force says Russia likely to blame for SolarWinds hack

The Cyber Unified Coordination Group said in a statement on Tuesday that fewer than 10 government agencies have been "compromised by follow-on activity" on federal systems as a result of the hack.

Defense Systems

SolarWinds hit with investor lawsuit over hack

SolarWinds is facing a class-action lawsuit in a Texas court from an investor who says the company misled the public and its customers by not disclosing a known vulnerability to its update server.

Defense Systems

50 orgs 'genuinely impacted' by SolarWinds hack, FireEye chief says

Approximately 50 organizations downloaded malicious code via SolarWinds software and were "genuinely impacted" by the sophisticated hacking campaign, according to FireEye CEO Kevin Mandia.

Defense Systems

CISA warns that SolarWinds software may not be only entry point in latest breaches

The security agency's latest alert suggests hackers may have found other entry points into government networks.

Defense Systems

Biden promises 'overwhelming focus' on hack recovery

The president-elect called out the Trump administration for failing to prioritize cybersecurity in general, and for "downplaying the seriousness" of the ongoing breach that has hit multiple federal agencies.

Defense Systems

Lawmakers seek details on damage done by the SolarWinds hack

As information trickles out about which federal agencies have been compromised by a sophisticated hacking operation, lawmakers have begun seeking an extensive accounting of what damage has been done.

Defense Systems

NSC invokes 2016 directive to respond to SolarWinds hack

The National Security Council's announcement to create a special group for coordinating the federal government's response to the SolarWinds hack comes as the list of affected agencies grows.

Defense Systems

CISA doesn't plan to tackle COVID vaccine disinformation

CISA’s acting director Brandon Wales said his agency is not the right source to counter anticipated disinformation about coronavirus vaccines.