House defense bill would usher in cybersecurity changes at DOD

The House of Representatives this week overwhelmingly passed a defense policy bill with several cybersecurity measures aimed at better securing Pentagon networks. The legislation — the fiscal 2019 National Defense Authorization Act (NDAA) — seeks closer collaboration between the departments of Defense and Homeland Security in defending against hackers, asks for quick notification of data breaches of military personnel, and continues to crack down on foreign-made telecom products that are deemed security threats. The NDAA is an annual ritual that lawmakers use to shape Pentagon policies and budget plans while throwing in some pet projects to boot. The House bill — a $717 billion behemoth — eventually will be merged with the Senate’s version, which that chamber’s Armed Services Committee also approved this week. It’s unclear when the Senate bill will have floor votes. One key provision of the House bill, according to the Rules Committee print, would set up a pilot program for […]

The post House defense bill would usher in cybersecurity changes at DOD appeared first on Cyberscoop.

Continue reading House defense bill would usher in cybersecurity changes at DOD

NIST wants to the federal government to pay more attention to the supply chain

A federal IT standards body has moved to add key supply-chain provisions to its risk management guidance at a time of growing concern that Russian and Chinese companies pose a threat to national security. The National Institute of Standards and Technology on Wednesday released a draft update to its influential Risk Management Framework, which federal agencies use to assess cyber risk. The provisional update includes measures to guard against untrusted suppliers and the possibility of hackers slipping malicious code into the supply chain. Defining — let alone securing — all the components and systems that organizations get from third parties can be a struggle, according to the document. One answer, NIST says, is building “a chain of trust” with suppliers to ensure that each one of them provides adequate security protections for their products. The new measures are critical because of the globalized nature of the IT supply chain, according to NIST fellow Ron Ross, one of the publication’s authors. […]

The post NIST wants to the federal government to pay more attention to the supply chain appeared first on Cyberscoop.

Continue reading NIST wants to the federal government to pay more attention to the supply chain

Pentagon orders military exchanges to pull Chinese smartphones over security risks

Huawei and ZTE are already telephones non gratae, tied too close for comfort to the Chinese Communist Party and People’s Liberation Army back home. Continue reading Pentagon orders military exchanges to pull Chinese smartphones over security risks

Pentagon bars Huawei, ZTE devices from sale on military bases

The Department of Defense is telling vendors on military bases to stop selling smartphones and other devices made by Chinese companies Huawei and ZTE, citing security concerns, according to a Pentagon statement. The news comes as the U.S. government scrutinizes the two companies for potentially enabling Chinese espionage through their technology. “Huawei and ZTE devices may pose an unacceptable risk to Department’s personnel, information and mission,” Pentagon spokesperson Major David Eastburb said in a statement. “In light of this information, it was not prudent for the Department’s exchanges to continue selling them to DoD personnel.” Pentagon-affiliated news outlet Stars and Stripes reported last month that Huawei phones were being sold by a TKS, a vendor to U.S. military bases in Germany. The company markets telecommunications services and devices to U.S. service members abroad. Eastburn says the order to stop selling Huawei-made phones, modems and other devices went out on Friday and the […]

The post Pentagon bars Huawei, ZTE devices from sale on military bases appeared first on Cyberscoop.

Continue reading Pentagon bars Huawei, ZTE devices from sale on military bases

Pre-installed malware on Android devices made $115k revenue in 10 days

By Waqas
Check Point Mobile Security Team discovered a massive, on-going malware
This is a post from HackRead.com Read the original post: Pre-installed malware on Android devices made $115k revenue in 10 days
Continue reading Pre-installed malware on Android devices made $115k revenue in 10 days