Vulnerability disclosure policies eyed for federal contractors in Senate bill
The legislation from Sens. Warner and Lankford would require federal contractors to adhere to NIST’s guidelines on VDPs.
Advertisement
OPM breach
Agencies don’t know what sensitive data new IT systems collect on Americans, GAO report finds
A rise in federal agency breaches involving personal data highlights the ongoing challenge the U.S. government faces in protecting privacy.
China could add new sets of genome data to espionage treasure trove, US officials warn
Beijing could pair DNA datasets with the millions of records thought to be in the hands of Chinese spies, U.S. officials worry.
Senate investigation finds agencies ‘unprepared’ to protect Americans’ data
Lessons from the 2015 OPM hack still haven’t been heeded, according to a Senate subcommittee.
DOJ regrets the error on OPM-linked fraud case
DOJ as apologized for confusion over its announcement last month that a fraudster used information stolen in the infamous 2015 OPM data breach.
Lawmakers demand answers in wake of strange OPM identity fraud lawsuit
Virginia lawmakers are especially interested in learning how the defendants acquired the data.
Advertisement
Capitol Hill staffers learn what really happens when there’s a data breach
To try to demystify the data-breach discussion on Capitol Hill, cybersecurity firm FireEye held a quiet training session for roughly 40 Senate and House staffers last month.
Mulvaney: CFPB hit by over 200 data ‘lapses’
Mick Mulvaney revealed Thursday that the agency had suffered some 240 “lapses” in data security over an unspecified time period, in addition to a suspected 800 other…
After 2015 breach, OPM overpaid for identity theft protections, report finds
The Office of Personnel Management appears to be overpaying for an identity theft insurance program intended to protect more than 20 million current and former U.S. government…
OPM-themed ransomware targets U.S. government workers
The messages warned receivers that their respective banks had notified OPM of suspicious account activity that could be reviewed via a malicious attachment.