Category: Operations Security

Operations Security, Security

Will new border tech put privacy rights at risk?

February 5, 2018

Via: FCW

The Electronic Frontier Foundation is concerned that some technologies being proposed in House border security bills are a potential threat to privacy. The group is concerned that an immigration bill from Reps. Bob Goodlatte (R-Va.) and Michael McCaul (R-Texas), respectively […]

Federal, Operations Security, Policy, Security

Even without full compliance, DHS happy with email hygiene mandate

January 22, 2018

Via: FCW

Despite reports from researchers criticizing the rate at which the government is adopting domain and email security protocols, the government is happy with agencies’ progress. At a Jan. 16 event, a Department of Homeland Security official said the department was […]

Operations Security, Security

Prosecutors say Mac spyware stole millions of user images over 13 years

January 11, 2018

Via: ArsTechnica

Early last year, a piece of Mac malware came to light that left researchers puzzled. They knew that malware dubbed Fruitfly captured screenshots and webcam images, and they knew it had been installed on hundreds of computers in the US […]

Operations Security, Security

Agencies have a long way to go to fix security clearance problems, GAO says

December 13, 2017

Via: FCW

A new GAO audit has found that many federal agencies have yet to implement years-old recommendations to reform and speed up their security clearance processes. The report covers the time period between 2012 and 2016 and examines the progress made […]

Operations Security, Security

Contractor agrees to new security protocols after exposing sensitive DISA data to Russia

December 12, 2017

Via: FCW

The Department of Justice announced an agreement Dec. 11 with contractor Netcracker Technology Corp. that would result in the company implementing additional security protocols that would ensure its U.S.-based technology clients do not store sensitive information and data overseas. The […]

Operations Security, Security

The real reason you’re failing at PCI DSS compliance

December 8, 2017

Via: CIO

For nine years, Verizon has released its annual Payment Security Report about the state of Payment Card Industry Data Security Standard (PCI DSS) compliance. For nine years, the pattern has remained the same: Many companies don’t comply with the standard, […]

Operations Security, Security

macOS High Sierra 10.13.2 is here with enterprise and security updates

December 7, 2017

Via: ArsTechnica

Rounding out several days of OS updates that included iOS 11.2, tvOS 11.2, and watchOS 4.2, Apple today rolled out macOS High Sierra 10.13.2 for supported Macs. You can download the update now from the Mac App Store. The update […]

Operations Security, Security

Apple releases a macOS security update to fix huge login security flaw

November 29, 2017

Via: Tech Crunch

Apple has just released a security update for macOS High Sierra and you should update right now (Apple will automatically push the security patch later today). This update fixes yesterday’s very concerning vulnerability that let anyone log into your Mac […]

Operations Security, Security

Delayed Security Clearance Reforms Could Increase Costs for Agencies

November 23, 2017

Via: Government Executive

Intelligence officials are still far behind in perfecting a system to continuously evaluate security clearance holders by scanning public records rather than relying on rigorous re-clearance investigations every five or 10 years, a congressional watchdog found. In October 2016, the […]

Networking Security, Operations Security, Security

Intel: We’ve found severe bugs in secretive Management Engine, affecting millions

November 21, 2017

Via: ZDnet

Thanks to an investigation by third-party researchers into Intel’s hidden firmware in certain chips, Intel decided to audit its firmware and on Monday confirmed it had found 11 severe bugs that affect millions of computers and servers. The flaws affect […]