Former CISA director Chris Krebs sues Trump campaign, lawyer after death threats

Chris Krebs, a former U.S. cybersecurity official whom President Donald Trump fired for saying the 2020 election was secure, has sued the Trump campaign, one of its lawyers and the conservative media outlet Newsmax for defamation after the lawyer made violent threats against Krebs. The lawyer, Joe diGenova, said last week in a video on Newsmax that Krebs should be “taken out at dawn and shot” and “drawn and quartered” for contradicting Trump’s baseless claims of widespread fraud and saying the election was secure. Krebs filed suit in a Maryland court on Tuesday, asking for monetary damages and for Newsmax to remove any recording of the threatening video from its website. The lawsuit cites numerous death threats Krebs has received via text and email since. The filing also accuses Trump and his legal team of carrying out a “pernicious conspiracy” to defame other Republicans who have refuted the president’s claims […]

The post Former CISA director Chris Krebs sues Trump campaign, lawyer after death threats appeared first on CyberScoop.

Continue reading Former CISA director Chris Krebs sues Trump campaign, lawyer after death threats

Biden’s DHS pick was a ‘quick study’ of cybersecurity issues as the department’s deputy

Alejandro Mayorkas, President-elect Joe Biden’s choice to run the Department of Homeland Security, gained an appreciation for how cyberthreats factor into national security challenges when he was deputy of the department from 2013 to 2016, former U.S. officials who know Mayorkas told CyberScoop. As DHS’s No. 2, the Cuban-American lawyer took a close interest in the department’s work on cyberthreat-sharing with the private sector, and was involved in negotiations with China over a 2015 agreement forbidding intellectual property theft. Mayorkas also witnessed the U.S. response to major state-sponsored hacking operations, from China’s alleged breach of the Office of Personnel Management to Russia’s probing of election infrastructure in 2016. Mayorkas is now poised to be a central figure in how the incoming Biden administration responds to such threats. “He clearly understood [cybersecurity] issues and why they were important and was a good advocate for DHS’s part in that,” said Christopher Painter, […]

The post Biden’s DHS pick was a ‘quick study’ of cybersecurity issues as the department’s deputy appeared first on CyberScoop.

Continue reading Biden’s DHS pick was a ‘quick study’ of cybersecurity issues as the department’s deputy

Pentagon’s initiative for Black cyber students met with cautious optimism

Not everyone in the cybersecurity community is entirely optimistic about a new U.S. military program meant to extend educational resources to historically Black colleges and universities. For years, the Department of Defense has worked to extend cybersecurity resources to historically Black colleges and universities (HBCUs). A new initiative meant to improve access to cybersecurity resources at HBCUs and Minority Serving Institutions, though, is being met with some skepticism among prominent cyber practitioners and educational advocates. Backed by the National Security Agency and the Pentagon’s Office of Small Business Programs, the goal is to connect Black and minority universities with other colleges that already meet NSA cybersecurity curriculum standards. The aim is to share resources, such as labs and range time, and advice on curriculum development. The effort, known as the Cybersecurity Education Diversity Initiative (CEDI), also allocates $300,000 available for internships, the Pentagon said. “A lot of these programs almost end up being lip service,” said Camille Stewart, who […]

The post Pentagon’s initiative for Black cyber students met with cautious optimism appeared first on CyberScoop.

Continue reading Pentagon’s initiative for Black cyber students met with cautious optimism

NSA aims to boost Black students’ access to security education, paid internships

The National Security Agency and the Department of Defense announced an initiative on Thursday meant to increase access to cybersecurity education, mentoring and paid internships for students at historically Black colleges and universities. The workforce development program will connect students at eligible educational institutions with internships and mentorship through the Pentagon’s Office of Small Business Programs, officials said Thursday during a call with reporters. Students may also participate in exercises at the Maryland Innovation & Security Institute’s virtual cyber range, to gain hands-on technical training that will help them to later provide technical assistance to small businesses. Students may receive paid stipends during their internships, according to a Defense Department and NSA release. Exactly how much money the NSA and the Defense Department will reward to students was not immediately clear. Shannon Jackson, associate director of the Department of Defense’s Office of Small Business Program, said the Cybersecurity Education Diversity Initiative (CEDI), is meant to […]

The post NSA aims to boost Black students’ access to security education, paid internships appeared first on CyberScoop.

Continue reading NSA aims to boost Black students’ access to security education, paid internships

Why the FBI’s cyber attachés are so valuable

On an average day, cybercriminals visiting the Darkode darkweb forum would expect to enter an underground, invitation-only digital marketplace to buy, sell, and trade malware, access to botnets, and stolen personal information. However, in July 2015, users were instead confronted with the emblems of the U.S. Federal Bureau of Investigation (FBI), the U.S. Department of Justice (DOJ), and EUROPOL’s European Cyber Crime Center (EC3) instead of the Darkode homepage. A large, bold warning surrounded by the official seals of 17 additional international police departments prominently proclaimed, “This domain and website have been seized.” This was the culmination of a multi-year joint undercover operation by U.S. and international law enforcement from 20 countries who searched, charged, or arrested 70 of the forum’s members worldwide and indicted 12 individuals with computer fraud conspiracy. This joint effort, known as Operation Shrouded Horizon, exemplifies the collaboration needed to counter the increasingly complex and diffuse […]

The post Why the FBI’s cyber attachés are so valuable appeared first on CyberScoop.

Continue reading Why the FBI’s cyber attachés are so valuable

This matters more: How cyber pros are confronting racism in their own ranks, and beyond

The police killing of George Floyd in Minneapolis last week prompted Leroy Terrelonge to do something he had never done: vividly recall all of his experiences with racism since youth. “I was surprised by how incidents that I had buried deep suddenly surged back to my memory and hurt all over again,” said Terrelonge, 34, a black cyber-risk analyst at Moody’s. “I imagined how they could have taken a wrong turn under certain circumstances and I, too, could be dead.” Terrelonge is one of millions of black Americans experiencing Floyd’s death in visceral ways. He’s also one of many cybersecurity professionals searching for the right balance between work and advancing social justice. The daily grind of reverse-engineering malware feels trivial when police are teargassing peaceful protesters, neighborhoods are in flames and opportunists unaffiliated with black social-justice causes are violently exploiting the unrest. “Information security is not often a matter of life or death, even for those […]

The post This matters more: How cyber pros are confronting racism in their own ranks, and beyond appeared first on CyberScoop.

Continue reading This matters more: How cyber pros are confronting racism in their own ranks, and beyond

Adjusting to the new security realities of a remote workforce

CIOs and CISOs have been under intense pressure to meet the needs of homebound workers, while simultaneously needing to take added steps to safeguard their enterprise networks. Steve Grobman, senior vice president and chief technology officer at McAfee, has a global view of that challenge. Grobman leads the company’s worldwide development of next-generation cyberdefense and data science technologies as well as threat and vulnerability research. In an interview for CyberScoop, Grobman shares his observations on what enterprise IT leaders are encountering — and measures that they might take to mitigate risks associated with home networks essentially becoming part of the enterprise IT infrastructure. This interview, underwritten by McAfee, was edited for brevity. CyberScoop: Organizations are sprinting to equip their employees to work remotely. How is that impacting the cyber risks enterprises face across their networks? Steve Grobman: Organizations must recognize that there are risks associated with new types of employees […]

The post Adjusting to the new security realities of a remote workforce appeared first on CyberScoop.

Continue reading Adjusting to the new security realities of a remote workforce

Security Considerations for a Blended Workforce

A blended workforce consisting of external organizations, traditional workers and non-traditional workers such as freelancers, remote workers, temporary workers and independent contractors (ICs) can provide an organization with the added potential for… Continue reading Security Considerations for a Blended Workforce

This team wants to teach your kids cybersecurity while they’re home from school

Coronavirus-related school closures are skyrocketing, leaving parents scrambling to educate their children while still juggling their jobs. It’s a challenging and confusing time — and Jonathan Slater and Lorna Armitage think they have something that might hold kids’ interest: a free online learning platform that teaches them about cybersecurity. The virtual “Cyber School,” slated to launch next Monday, plans to host daily 45-minute livestreams focused on topics including an introduction to coding and algorithms, online safety, ethical hacking and social engineering. Armitage and Slater are part of a growing cohort of cybersecurity professionals who, in addition to their day jobs, are volunteering to share their cybersecurity expertise during the coronavirus pandemic. “What can we do to help and care? Kids are going to be out of school, why don’t we try to put something together and get them interested in computer science and cybersecurity and tech in general?” Armitage, a […]

The post This team wants to teach your kids cybersecurity while they’re home from school appeared first on CyberScoop.

Continue reading This team wants to teach your kids cybersecurity while they’re home from school

A psychiatrist fights the cyber industry’s mental health stigma — and appeals for help

Beyond the spotlight of the cybersecurity industry’s IPO-fueled paydays and reputation-making research lives the slow burn of daily anxiety. In just about every industry, mental health is overlooked and under-appreciated. But in cybersecurity, “it’s even more stigmatized,” according to psychiatrist Ryan Louie. “Nobody wants their security clearances or career advancements somehow impacted because of perceptions about mental health,” he told CyberScoop. And so Louie, who works at a 30-bed psychiatric ward in San Francisco, took to the 2020 RSA Conference, one of the biggest cybersecurity conferences in the world, to start a conversation about mental health. “We want to get more people [from] all different industries to start thinking about this,” Louie said after his presentation at the conference on Friday. Alert and bespectacled on stage, Louie explained why, as a psychiatrist who treats patients of all stripes, he became interested in cybersecurity. “Fundamentally, I’ve always felt that the most […]

The post A psychiatrist fights the cyber industry’s mental health stigma — and appeals for help appeared first on CyberScoop.

Continue reading A psychiatrist fights the cyber industry’s mental health stigma — and appeals for help