The Department of Homeland Security (DHS) announced a “bug bounty” program on December 14, 2021, called “Hack DHS.” Yes, you read that right. DHS is actually going to invite select cybersecurity “hackers” to try to hack into its systems. DHS created the program to “identify potential cybersecurity vulnerabilities within certain DHS systems and increase the
Department of Homeland Security
U.S. Customs and Border Protection Failed to Adequately Secure and Protect Traveler Data
This week, the Department of Homeland Security’s inspector general said in an oversight report that U.S. Customs and Border Protection (CBP) officials have failed to use adequate cybersecurity measures and safeguards to protect travelers’ data. The report says that from July 2017 to December 2019, personal data was left vulnerable to hackers in the Mobile…
Urgent Warning of Imminent Threat to Hospitals Issued by U.S. Government
On October 27, 2020, the FBI and the Department of Homeland Security (DHS) warned the health care industry about “an imminent cybercrime threat to U.S. hospitals and healthcare providers.”
According to the warning, which was shared during a conference call, the government has received “credible information of an increased and imminent cybercrime threat to U.S.…
SEC Issues Warning for Advisors and Broker-Dealers on Increased Ransomware Attacks
On July 10, 2020, the Securities and Exchange Commission, through its Office of Compliance Inspections and Examinations (OCIE), issued a warning to advisors and broker-dealers to “immediately” review their cybersecurity controls to prevent and respond to an increase in phishing campaigns and ransomware attacks.
The Risk Alert advises that the OCIE has “observed an apparent…
DHS Warns Windows 10 Users of Exploit Code
The Department of Homeland Security (DHS) cybersecurity advisory arm issued a warning on its website that “[M]alicious cyber actors are targeting unpatched systems” with a new exploit code that on unpatched systems could spread to millions of computers.
The exploit code, called SMBGhost, attacks a security vulnerability in the server message block (SMB) that Microsoft…
Natural Gas Compressor Facility Shut Down After Ransomware Attack
The Department of Homeland Security (DHS) announced this week that a ransomware attack shut down a natural gas compressor facility for two days. While in the network, the attacker deployed software trying to “identify critical assets” before setting off the ransomware and in the process, may have also disabled detection processes in place to identify…
States and Municipalities on High Alert for Iranian Originated Cyber-Attacks
The Department of Homeland Security (DHS) is warning critical infrastructure operators to be on high alert for Iranian backed cyber-attacks because of the vulnerability of state and municipal computer systems, they are at high risk for attack from Iranian-based hackers.
We have seen states and municipalities get hammered with ransomware in the past year. Now…
Department of Homeland Security Warns of Cyber-Attacks by Iran
The Department of Homeland Security (DHS) issued a grave warning to U.S. businesses and critical infrastructure operators on January 6, 2020, alerting the public that Iran poses a cyber terrorism threat to the United States following the death of Iranian Quds Force commander Gen. Qassem Soleimani.
The bulletin explains that Iran’s previous plots against the…
Can You Really Protect Against Ransomware?
We’ve written a few times recently about municipalities, companies, and government agencies hit with ransomware attacks this year. In early July, it was reported that a court system in Georgia was attacked with ransomware, causing lawyers, court employees and the public to have to rely on “old school” paper to file pleadings and keep…
Privacy Tip #162 – Cybersecurity Help for Small Businesses
Small businesses are targeted by hackers because they often do not have the resources to stay abreast of new schemes, or to protect against them with the latest technology or security solutions. Small businesses have historically struggled with data security, so any help is always welcome.
Recognizing that small businesses struggle with data security, the…