Facebook intends to implement end-to-end encryption despite DOJ pressure

Facebook is not giving in to Department of Justice demands on weakening encryption, according to a new letter the company sent to U.S. Attorney General Bill Barr and acting Secretary of Homeland Security Chad Wolf on Monday. “Cybersecurity experts have repeatedly proven that when you weaken any part of an encrypted system, you weaken it for everyone, everywhere,” Will Cathcart, vice president and head of WhatsApp, and Stan Chudnovsky, vice president and head of Facebook Messenger, wrote in the letter, which CyberScoop acquired. “The ‘backdoor’ access you are demanding for law enforcement would be a gift to criminals, hackers and repressive regimes, creating a way for them to enter our systems and leaving every person on our platforms more vulnerable to real-life harm.” The letter comes as tech companies, privacy experts, lawmakers and government agencies continue to debate how law enforcement can track criminals when they are “going dark” by using encrypted commercially available […]

The post Facebook intends to implement end-to-end encryption despite DOJ pressure appeared first on CyberScoop.

Continue reading Facebook intends to implement end-to-end encryption despite DOJ pressure

DHS official briefs senators on state ransomware threats in classified meeting

The head of the Department of Homeland Security’s cybersecurity division on Wednesday provided senators with a classified briefing on ransomware attacks, the latest indication of the threat the file-locking malware poses to state and local governments. Chris Krebs, director of DHS’s Cybersecurity and Infrastructure Security Agency (CISA), briefed the Senate Cybersecurity Caucus, a bipartisan group of lawmakers led by Sens. Mark Warner, D-Va., and Cory Gardner, R-Colo. The newest member of the caucus, Sen. Maggie Hassan, D-N.H., confirmed the briefing in a statement. “From ransomware attacks on local hospitals to a hack of federal government records, cyberattacks pose a serious threat to our communities and national security,” Hassan said. In the last few years, poorly secured U.S. businesses, schools, and local governments have lost millions of dollars after ransomware infections. Over 100 public-sector ransomware attacks have been reported in 2019 alone, double the amount in 2018. This classified briefing followed an unprecedented, closed-door summit held by […]

The post DHS official briefs senators on state ransomware threats in classified meeting appeared first on CyberScoop.

Continue reading DHS official briefs senators on state ransomware threats in classified meeting

Citing security concerns, senators call on White House to appoint coordinator for 5G issues

A bipartisan group of senators wants the Trump administration to appoint a top official to coordinate policy for issues related to 5G communications, saying the current marketplace for the technology poses an “unprecedented security challenge” to the U.S. and its allies. “China’s leadership [in 5G], combined with the United States’ increased reliance on high-speed, reliable telecommunications services to facilitate both commerce and defense, poses a strategic risk for the country,” the senators wrote Tuesday to White House national security adviser Robert O’Brien, advising him to tap a senior official to coordinate 5G policy across federal agencies. The chairman and ranking member of Senate committees dealing with intelligence, foreign relations, defense and homeland security all signed the letter. U.S. officials have long fretted that Chinese telecommunications companies like Huawei are in prime position to shape 5G deployments around the world. Those networks, which promise must faster connectivity, would be ripe for Chinese […]

The post Citing security concerns, senators call on White House to appoint coordinator for 5G issues appeared first on CyberScoop.

Continue reading Citing security concerns, senators call on White House to appoint coordinator for 5G issues

Mozilla says ISPs are lying to Congress about encrypted DNS

Mozilla on Friday posted a letter urging Congress to take the broadband industry’s lobbying against encrypted DNS within Firefox and Chrome with a grain of salt. Continue reading Mozilla says ISPs are lying to Congress about encrypted DNS

With workforce in mind, bipartisan bill proposes incentives for cybersecurity education, and more

The HACKED Act is actually about making sure people don’t get hacked. The bipartisan bill — with the full title “The Harvesting American Cybersecurity Knowledge through Education Act” — was introduced Tuesday by four senators who say it would boost cybersecurity education and expand workforce training. The legislation comes as the Trump administration, Congress and industry have all taken steps to boost the cybersecurity workforce through training, recruitment and retention. “America is facing serious cyberthreats every day in today’s increasingly connected world, yet there is a serious shortage of workers needed to confront this urgent challenge,” Sen. Maria Cantwell, D-Wash., one of the cosponsors and the Commerce Committee’s ranking member, said in a statement. “The bipartisan HACKED Act of 2019 would help address this by training cybersecurity educators and skilling American workers to do these jobs, as well as increasing coordination on these issues throughout the government.” The bill includes proposals to incentivize recruitment of […]

The post With workforce in mind, bipartisan bill proposes incentives for cybersecurity education, and more appeared first on CyberScoop.

Continue reading With workforce in mind, bipartisan bill proposes incentives for cybersecurity education, and more

Republican congressman warns of mobile threats following SCIF storming

After Republican lawmakers stormed a closed-door impeachment inquiry hearing Wednesday, one of their colleagues warned against bringing mobile devices anywhere near secure briefing rooms on Capitol Hill. In general, “if anybody brings a phone in, that’s a problem,” Rep. Mike Rogers, R-Ala., told reporters Thursday, adding that such an action would “absolutely” be a security concern. Several House Republicans barged into a Sensitive Compartmented Sensitive Compartmented Information Facility (SCIF) on Wednesday, reportedly with their cell phones, disrupting an impeachment inquiry hearing on the Trump administration’s handling of aide to Ukraine. SCIFs allow lawmakers to review classified material in a secure setting, and any introduction of outside devices could leave the rooms susceptible to eavesdropping. In this case, one lawmaker said on Twitter that he was inside the secure facility, where outside phones are prohibited, though his staff later said it posted the tweet. Another congressman later made a phone call from the SCIF. The facility had to be […]

The post Republican congressman warns of mobile threats following SCIF storming appeared first on CyberScoop.

Continue reading Republican congressman warns of mobile threats following SCIF storming

DHS asks Congress for subpoena authority to contact vulnerable asset owners

The Department of Homeland Security has asked lawmakers for subpoena authority in order to directly contact organizations vulnerable to hacking rather than having to rely on outside parties to communicate with the private sector. The move is an attempt to speed up the process by which DHS’s Cybersecurity and Infrastructure Security Agency (CISA) interacts with critical infrastructure companies on the front lines of state-sponsored hacking threats. Right now, DHS officials say, they have IP addresses of vulnerable systems in the private sector, but can’t obtain the contact information for equipment owners through internet service providers. And so DHS is seeking “administrative” subpoena authority, which would compel an ISP to turn over that information and allow the department to contact those potential hacking victims directly. “Over many years, we have tried many methods to be able to contact these entities,” said Jeanette Manfra, CISA’s assistant director for cybersecurity and communications. “The […]

The post DHS asks Congress for subpoena authority to contact vulnerable asset owners appeared first on CyberScoop.

Continue reading DHS asks Congress for subpoena authority to contact vulnerable asset owners

Security clearance background checks should take three days, Rep. Will Hurd says

Rep. Will Hurd, who recently announced he is leaving Congress after his current term is up, has something to get off his chest. The Texas Republican has previously said he thinks the federal government should be able to issue security clearances in one week — but now he says it can be done in three days. “I never thought I would have to work on such a basic issue as this: [Getting a security clearance] shouldn’t take 9 months,” Hurd said Thursday at the Dell Technologies Forum. “I think we can do it in three days.” Currently, the federal government is currently working on overhauling the security clearance process as part of an overhaul known as Trusted Workforce 2.0 — and already in the last several months the government has made some progress on the backlog of applications. Hurd — a former CIA officer — has had a front-row seat for the process […]

The post Security clearance background checks should take three days, Rep. Will Hurd says appeared first on CyberScoop.

Continue reading Security clearance background checks should take three days, Rep. Will Hurd says