Department of Homeland Security
Things Were Even Worse at CISA Than We Thought
Just last week I wrote that CISA was on life support. That was before we knew how bad it really was. When Jen Easterly stepped down and the agency was left without ...
Security Boulevard
Fight for the Future, EFF, Others Push Back Against Growing ICE Surveillance
Jeffrey Burt | | anti-surveillance, Congress, Department of Homeland Security, EFF, facial recognition technology, Fight for the Future, geofencing and location tracking, Immigration and Customs Enforcement, Palantir, PenLink, Trump Administration
The privacy rights group Fight for the Future was one of 44 organizations that sent a letter to lawmakers urging them to pull back on funding for ICE, noting the growing threats ...
Security Boulevard
ICE’s Shiny New ‘AI’ Facial Recognition App: False Positives Ahoy!
Richi Jennings | | AI, AI (Artificial Intelligence), Artificial Intelligence, Artificial Intelligence (AI), Artificial Intelligence (AI)/Machine Learning (ML), artificial intelligentce, artificial intellignece, biometric, biometric data, Biometric Data Abuse, biometric identification, biometric identity, biometric technology, CBP, Data & Artificial Intelligence (AI), Department of Customs and Border Protection, Department of Homeland Security, DHS, digital biometrics, Digital Surveillance, facial recognition, facial recognition technology, false positive, false positives, generative artificial intelligence, government surveillance, homeland security, ICE, IDENT, Identity Surveillance, immigration, Immigration and Customs Enforcement, lawful surveillance, Mobile Fortify, Mobile Surveillance, Passive biometrics, police surveillance, SB Blogwatch, U.S. Department of Homeland Security, United States Department of Homeland Security, US Customs and Border Protection, US Homeland Security, USDHS
Mobile Fortify: Liberty’s existential threat, or sensible way to ID illegal immigrants? ...
Security Boulevard
As US CVE Database Fumbles, EU ‘Replacement’ Goes Live
Richi Jennings | | CERT-EU, cisa, CISA Research, common vulnerabilities and exposures, CVE, CVE (Common Vulnerabilities and Exposures), CVE database, CVE Program, Cybersecurity and Infrastructure Security Agency, cybersecurity funding, Department of Homeland Security, DHS, ENISA, eu, EU Agency for Cybersecurity, European Union, European Union (EU), EUVD, Funding & Grants, Juhan Lepassaar, MITRE, MITRE Framework, National Institute of Standards and Technology, National Institute of Standards and Technology (NIST), NIS2, NIS2 Directive, NIST, SB Blogwatch, U.S. Department of Homeland Security, vulnerability database
Diesen Kuß der ganzen Welt! European Union Vulnerability Database (EUVD) launches this week. And not a moment too soon ...
Security Boulevard
MITRE Crisis: CVE Cash Ends TODAY — CISA says ‘No Lapse’
Richi Jennings | | cisa, CISA Research, common vulnerabilities and exposures, CVE, CVE (Common Vulnerabilities and Exposures), CVE database, CVE Program, Cybersecurity and Infrastructure Security Agency, cybersecurity funding, Department of Homeland Security, DHS, Funding & Grants, MITRE, MITRE Framework, National Institute of Standards and Technology, National Institute of Standards and Technology (NIST), NIST, SB Blogwatch, U.S. Department of Homeland Security
These are “interesting” times: U.S. government funding for the Common Vulnerabilities and Exposures program expires April 16 ...
Security Boulevard
Teenage Hackers Must be Stopped: US DHS’s CSRB Report
Richi Jennings | | 2 factor auth, 2-factor authentication, 2fa, 2FA bypass, 2FA Flaws, 2FA phishing, 2FA policies, 2FA/MFA, cellphone fraud, CSRB, Cyber Safety Review Board, Department of Homeland Security, DHS, DUAL FACTOR AUTHENTICATION, factor auth, homeland security, Homeland Security Presidential Directive, homelandsecurity, Lapsus$, Multi-Factor Authentication, Multi-Factor Authentication (MFA), Multifactor Authentication, SB Blogwatch, SIM swap, sim swap fraud, SIM swap scams, SIM swapping, two factor authentication, U.S. Department of Homeland Security, United States Department of Homeland Security, US Homeland Security
2FA SMS FAIL: Lapsus$ social engineers exploited weak two-factor authentication. Something must be done! (Well, this is something.) ...
Security Boulevard
Sounding the Alarm on Emergency Alert System Flaws
BrianKrebs | | A Little Sunshine, comcast, Cybir, David McGuire, defcon, Department of Homeland Security, Digital Alert Systems, Emergency Alert System, Ken Pyle, Latest Warnings, Monroe Electronics, The Coming Storm
The Department of Homeland Security (DHS) is urging states and localities to beef up security around proprietary devices that connect to the Emergency Alert System -- a national public warning system used ...
New Cyber Safety Review Board Will Tackle Log4j Debacle First
Teri Robinson | | 0-day vulnerability, Apache Log4j (CVE-2021-44228), Cyber Safety Review Board, Department of Homeland Security
DHS has launched the long-awaited Cyber Safety Review Board (CSRB) to assess major cybersecurity incidents and make recommendations for improvements. After a year in the making, the CSRB is first setting its ...
Security Boulevard
FBI Raids Chinese Point-of-Sale Giant PAX Technology
BrianKrebs | | A Little Sunshine, Department of Customs and Border Protection, Department of Homeland Security, Federal Bureau of Investigation, Naval Criminal Investigative Services, PAX Technology, WOKV.com
U.S. federal investigators today raided the U.S. offices of PAX Technology, a Chinese provider of point-of-sale devices used by millions of businesses and retailers globally. KrebsOnSecurity has learned the raid is tied ...
How Pipeline Owners and Operators Can Fulfill the TSA’s Second Security Directive
Alex Bagwell | | Compliance, Department of Homeland Security, DHS, ICS Security, industrial control systems, operational technology
Back in June, I wrote about the Transportation Security Agency’s (TSA) new security directive concerning pipeline owners and operators. The order mandated those entities to disclose security incidents such as the ransomware ...

