NSA

Ex-NSA techie pleads guilty to selling state secrets to Russia

Wannabe spy undone by system logs, among other lapses in judgement

Security24 Oct 2023 | 11

CISA reveals 'Admin123' as top security threat in cyber sloppiness chart

Calls for wider adoption of security-by-design principles continue to ring loudly from Uncle Sam

Security06 Oct 2023 | 8

NSA hopes AI Security Center will help US outsmart, outwit, and outlast adversaries

Agency boss warns enemies trying to nick AI advances and 'corrupt our application of it'

AI + ML02 Oct 2023 | 1

Feds' privacy panel backs renewing Feds' S. 702 spying powers — but with limits

FBI agents ought to get spy court approval before reviewing US persons' chats, board reckons

Security28 Sep 2023 | 2

Millions of people's data stolen because web devs forget to check access perms

IDORs of the storm

CSO29 Jul 2023 | 40

To kill BlackLotus malware, patching is a good start, but...

...that alone 'could provide a false sense of security,' NSA warns in this handy free guide for orgs

CSO22 Jun 2023 | 4

10 years after Snowden's first leak, what have we learned?

Feature Spies gonna spy

Security07 Jun 2023 | 36

US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster

It's not all doom and gloom because ML also amplifies defensive efforts, probably

CSO12 Apr 2023 | 15

Why a top US cyber spy urges: Get religious about backups

Lesson we've learned from Ukraine

Defense Tech Week03 Apr 2023 | 36

Supreme Court not interested in hearing about NSA's super-snoop schemes

Warrantless data harvesting, you say? Feds have their secret reasons and we're OK with that

Personal Tech22 Feb 2023 | 27

Months after NSA disclosed Microsoft cert bug, datacenters remain unpatched

You know when we all said quit using MD5? We really meant it

CSO26 Jan 2023 | 3

IPv6 for Dummies: NSA pushes security manual on DoD admins

There's good advice here for any IT pro dealing with the transition

Networks25 Jan 2023 | 26

NSA asks Congress to let it get on with that warrantless data harvesting, again

In brief Also: That Pokemon is actually a RAT, Uncle Sam fails a password audit

Security14 Jan 2023 | 24

NSA urges orgs to use memory-safe programming languages

C/C++ on the bench, as US snoop HQ puts its trust in Rust, C#, Go, Java, Ruby, Swift

Security11 Nov 2022 | 154

NSA urges enterprises to watch China, Taiwan tensions

Have you thought about your supply chains, partnerships, and how far they reach?

Security18 Oct 2022 | 2

Cyber-snoops broke into US military contractor, stole data, hid for months

Tell us it’s Russia without telling us it’s Russia

Security05 Oct 2022 | 14

FBI: We tracked who was printing secret documents to unmask ex-NSA suspect

Infosec systems designer alleged to have chatted with undercover agent

Security03 Oct 2022 | 53

As Cybersecurity Week begins, Beijing claims US attacked Uni doing military research

National Security Agency apparently has tools that crack Solaris boxes

Security07 Sep 2022 | 10

Don't ditch PowerShell to improve security, say infosec agencies from UK, US, and NZ

Use it sensibly instead – which means turning on the useful bits Microsoft doesn't enable by default

Security23 Jun 2022 | 20

Beijing-backed baddies target unpatched networking kit to attack telcos

NSA, FBI and CISA issue joint advisory that suggests China hardly has to work for this – flaws revealed in 2017 are among their entry points

Security08 Jun 2022 | 3

US cyber chiefs: Moving to Shields Down isn't gonna happen

RSA Conference Promises new alert notices but warn 'we can sometimes predict thunderstorms but not lightning strikes'

CSO08 Jun 2022 | 6

False-flag cyberattacks a red line for nation-states, says Mandiant boss

NSA director says he doesn't know of a 'big one' that was successful

CSO07 May 2022 | 27

US Cyber Command shored up nine nations' defenses last year

'Hunt forward' operations push US capabilities across borders

Security04 May 2022 | 15

Five Eyes nations reveal 2021's fifteen most-exploited flaws

Malicious cyber actors go after 2021's biggest misses, spend less time on the classics

Security28 Apr 2022 | 10

National Security Agency employee indicted for 'leaking top secret info'

Managed to send material from his private email address, it is claimed

Security01 Apr 2022 | 31

China thrilled it captured already-leaked NSA cyber-weapon

Not now with your mischief, Beijing

Security14 Mar 2022 | 22

Anatomy of suspected top-tier decade-hidden NSA backdoor

Bvp47 of yore said to have used BPF to conceal comms in network traffic

Security23 Feb 2022 | 19

Ex-US intel, military trio were cyber-mercenaries for UAE, say prosecutors

Three men charged with breaking export, security laws, agree to deal after infiltrating smartphones with zero-click exploits

Security15 Sep 2021 | 22

HPE bags $2bn HPC-as-a-service gig with the NSA

Ten-year agreement kicks off in 2022 to help spies do spying

HPC01 Sep 2021 | 1

NSA: We 'don't know when or even if' a quantum computer will ever be able to break today's public-key encryption

Then again, it would say that

Security01 Sep 2021 | 69

Looks like NSA now stands for Not Selecting Azure: US spy agency picks AWS over Microsoft

Déjà vu time as $10bn contract award attracts the inevitable bid protest

PaaS + IaaS11 Aug 2021 | 13

Ex-NSA leaker Reality Winner released from prison early for 'exemplary' behavior

Will be transferred to a halfway house, attorney continues to fight for presidential pardon

Security14 Jun 2021 | 15

Snowden was right, rules human rights court as it declares UK spy laws broke ECHR

Says privacy and freedom of expression breached, but upholds sending surveillance product to foreign countries

Security25 May 2021 | 80

The perils of non-disclosure? China 'cloned and used' NSA zero-day exploit for years before it was made public

Check Point says Beijing 'reconstructed' Equation Group's hacking tool long before leak

Security23 Feb 2021 | 39

Kremlin hackers are right now exploiting security hole in VMware software to hijack systems, NSA warns

So, you know, patch it

Security07 Dec 2020 | 17

NSA: We've learned our lesson after foreign spies used one of our crypto backdoors – but we can't say how exactly

Senator Wyden puts surveillance nerve-center on blast

Security28 Oct 2020 | 90

Top tip, everyone: Chinese hackers are hitting these 25 vulns, so make sure you patch them ASAP, says NSA

Plus this Chrome one being exploited in the wild, we note

Security20 Oct 2020 | 13

Worried about bootkits, rootkits, UEFI nasties? Have you tried turning on Secure Boot, asks the No Sh*! Agency

And have you tried simply asking hackers to not hack?

Security16 Sep 2020 | 22

Snowden was right: US court deems NSA bulk phone-call snooping illegal, possibly unconstitutional, and probably pointless anyway

Privacy campaigners cheer ruling 7 years in the making

Security03 Sep 2020 | 45

This NSA, FBI security advisory has four words you never want to see together: Fancy Bear Linux rootkit

From Russia, with love

Security13 Aug 2020 | 67

NSA warns that mobile device location services constantly compromise snoops and soldiers

It might be best not to ask how the NSA knows this and why it advises most mitigations don’t help

Security05 Aug 2020 | 88

It's not every day the NSA publicly warns of attacks by Kremlin hackers – so take this critical Exim flaw seriously

GRU crew actively exploit hole – but you patched it months ago, right?

Security29 May 2020 | 10

US Congress: Spying law is flawed, open to abuse, and lacking in accountability – so let's reauthorize it

Yep, it's NSA Groundhog Day again

Security12 Mar 2020 | 9

After blowing $100m to snoop on Americans' phone call logs for four years, what did the NSA get? Just one lead

Section 215 more useless than we suspected yet they still want to keep it

Security26 Feb 2020 | 34

Remember the Clipper chip? NSA's botched backdoor-for-Feds from 1993 still influences today's encryption debates

Enigma We'll laugh at today's mandated holes in the same way we laugh at those from 25 years ago

Security27 Jan 2020 | 66

NSA to Congress: Our spy programs don’t work, aren’t used, or have gone wrong – now can you permanently reauthorize them?

Senators: Um, no.

Security06 Nov 2019 | 57

Uncle Sam demands summary judgment on Snowden memoir: We're not saying it's true, but no one should read it

We really needed to take a look before you published

Security25 Oct 2019 | 47

American intelligence follows British lead in warning of serious VPN vulnerabilities

Now if only they'd accept the Queen back again...

Security10 Oct 2019 | 15

Remember the FBI's promise it wasn’t abusing the NSA’s data on US peeps? Well, guess what…

Turns out the Feds make the CIA and NSA actually look good

Legal08 Oct 2019 | 77

A Nord VPN bug, a(nother) bad Microsoft patch, Zynga data farmed out, and more

Roundup Plus, NSA's Ghidra found to contain faulty code

Security05 Oct 2019 | 6

NSA asks Congress to permanently reauthorize spying program that was so shambolic, the snoops had shut it down

Analysis You never know, we might figure out how not to screw up in future

Security16 Aug 2019 | 42

All roads in US cable biz GTT's Brit network seem to lead to Menwith Hill

You know, the US spy station with the golf balls

Networks13 Aug 2019 | 52

FBI, NSA to hackers: Let us be blunt. Weed need your help. We'll hire you even if you've smoked a little pot in the past

Black Hat Now that's what we call a joint task force: Uncle Sam chills out, relaxes recruitment rules on drugs

Security08 Aug 2019 | 69

When Harry met celly: NSA hoarder thrown in the clink for 9 years – after taking classified work home for decades

Contractor Martin sentenced for squirreling away 50TB of hush-hush files, exploits

Security19 Jul 2019 | 37

Years late to the SMB1-killing party, Samba finally dumps the unsafe file-sharing protocol version by default

Although you can still use it if you like the thrill of danger

Software09 Jul 2019 | 51

While we were raging about Putin's meddling and Kremlin hackers, Five Eyes were pwning Yandex, Russia's Google

... Are ... are we the baddies?

Security27 Jun 2019 | 23