Michael Ellis as NSA General Counsel

Over at Lawfare, Susan Hennessey has an excellent primer on how Trump loyalist Michael Ellis got to be the NSA General Counsel, over the objections of NSA Director Paul Nakasone, and what ...

The NSA is Refusing to Disclose its Policy on Backdooring Commercial Products

Senator Ron Wyden asked, and the NSA didn’t answer: The NSA has long sought agreements with technology companies under which they would build special access for the spy agency into their products, ...

Google Responds to Warrants for “About” Searches

One of the things we learned from the Snowden documents is that the NSA conducts “about” searches. That is, searches based on activities and not identifiers. A normal search would be on ...

NSA Data Collection Ruling, Browsing History Identification, Ambulance Chasing

In episode 137 for September 7th 2020: A federal appeals court finds the NSA’s bulk collection of phone data was unlawful, new research shows that browsing histories are unique enough to reliably ...
Drovorub components

Drovorub “Taking systems to the wood chipper” – What you need to know

On August 15th the NSA and FBI published a joint security alert containing details about a previously undisclosed Russian malware. The agencies say that the Linux strain malware has been developed and ...
Russia’s GRU Military Unit Behind Previously Unknown Linux Malware, NSA Says

Russia’s GRU Military Unit Behind Previously Unknown Linux Malware, NSA Says

The National Security Agency (NSA) and the Federal Bureau of Investigation (FBI) have revealed the existence of a new piece of malware named Drovorub, most likely developed by a military unit of ...

The NSA on the Risks of Exposing Location Data

The NSA has issued an advisory on the risks of location data. Mitigations reduce, but do not eliminate, location tracking risks in mobile devices. Most users rely on features disabled by such ...
NSA & CISA Call For Action to Lower OT/IoT Cybersecurity Exposure

NSA & CISA Call For Action to Lower OT/IoT Cybersecurity Exposure

The National Security Agency and the Cybersecurity and Infrastructure Security Agency urge U.S. critical infrastructure to secure their OT assets now. The post NSA & CISA Call For Action to Lower OT/IoT ...
NSA & CISA Call For Action to Lower OT/IoT Cybersecurity Exposure

NSA & CISA Call For Action to Lower OT/IoT Cybersecurity Exposure

The National Security Agency and the Cybersecurity and Infrastructure Security Agency urge U.S. critical infrastructure to secure their OT assets now. The post NSA & CISA Call For Action to Lower OT/IoT ...
CISA, NSA Lay Out Recommendations for Protecting OT Assets

CISA, NSA Lay Out Recommendations for Protecting OT Assets

The Cybersecurity & Infrastructure Security Agency (CISA) and the National Security Agency (NSA) laid out a series of recommendations for critical infrastructure owners and operators to protect their operational technology (OT) assets ...