Tag Archive for: Post

Pentagon cyber policy post may stay unfilled during review


WASHINGTON — A newly created senior cyber oversight position at the Department of Defense will likely remain unfilled until the end of the year at the earliest, as the Pentagon works with an outside group on the officeholder’s responsibilities and objectives.

A federally funded research and development center, or FFRDC, was selected to examine the assistant secretary of defense for cyber policy role, carved out by the fiscal 2023 National Defense Authorization Act, according to John Plumb, the assistant secretary of defense for space policy and the principal cyber adviser to the defense secretary.

While the ball is already rolling, results aren’t expected for months, Plumb told members of the House Armed Services Committee on March 30. The Rand Corporation is involved in the assessment, the cybersecurity publication The Record reported.

Rep. Mike Gallagher, a Wisconsin Republican at the head of the Cyber, Information Technology and Innovation panel, said at the hearing he’s disappointed by the timing.

“I’m confident that the Senate is ready to rapidly confirm a nominee,” he said. “I’ve had many conversations to that effect.”

A deputy assistant secretary for cyber policy already exists. The position is held by Mieke Eoyang.

Interest in and spending on cyber has boomed in recent years. The Pentagon’s fiscal 2024 budget blueprint includes $13.5 billion for so-called cyberspace activities, such as zero-trust implementation. The sum is nearly 21% more than the FY23 ask.

The assistant secretary gig may include aspects of electronic and information warfare, according to Plumb, who described the forthcoming review as “deliberate.”

“What we are doing is following the template that was used to create my current position, ASD for space, which is putting an FFRDC on contract to examine what is the proper structure, are there different pieces required, what things should be in this,” said Plumb, who was confirmed in March 2022. “That is on contract now. We expect that the study should be done around September. But we are moving forward on it.”

Colin Demarest is a reporter at C4ISRNET, where he covers military networks, cyber and IT. Colin previously covered the…

Source…

Chinese gadget makers embrace new IoT standard to ease security concerns – South China Morning Post



Chinese gadget makers embrace new IoT standard to ease security concerns  South China Morning Post

Source…

Hackers post email addresses linked to 200 million Twitter accounts, security researchers say




CNN
 — 

Email addresses linked to more than 200 million Twitter profiles are currently circulating on underground hacker forums, security experts say. The apparent data leak could expose the real-life identities of anonymous Twitter users and make it easier for criminals to hijack Twitter accounts, the experts warned, or even victims’ accounts on other websites.

The trove of leaked records also includes Twitter users’ names, account handles, follower numbers and the dates the accounts were created, according to forum listings reviewed by security researchers and shared with CNN.

“Bad actors have won the jackpot,” said Rafi Mendelsohn, a spokesman for Cyabra, a social media analysis firm focused on identifying disinformation and inauthentic online behavior. “Previously private data such as emails, handles, and creation date can be leveraged to build smarter and more sophisticated hacking, phishing and disinformation campaigns.”

Some reports suggested the data was collected in 2021 through a bug in Twitter’s systems, a flaw the company fixed in 2022 after a separate incident in July involving 5.4 million Twitter accounts alerted the company to the vulnerability.

Troy Hunt, a security researcher, said Thursday that his analysis of the data “found 211,524,284 unique email addresses” that had been leaked. The Washington Post earlier reported a forum listing promoting the data of 235 million accounts.

Hunt did not immediately respond to a question from CNN asking whether the records would be added to his website, haveibeenpwned.com, which allows users to search hacked records to determine if they have been affected. CNN has not independently verified the records’ authenticity.

Twitter didn’t immediately respond to a request for comment. Its communication team, along with roughly half of Twitter’s overall workforce, was gutted after billionaire Elon Musk completed his acquisition the company in late October. The significant staff reductions could now add to concerns about the company’s ability to respond to…

Source…

At the crossroads – Millennium Post



At the crossroads  Millennium Post

Source…