Contractor Blamed in DHS Data Breaches
233402
The FBI is investigating a major information technology firm with a $1.7 billion Department of Homeland Security contract after it allegedly failed to detect cyber break-ins traced to a Chinese-language Web site and then tried to cover up its deficiencies, according to congressional investigators.
682292
InfoWorld - IT systems integrator Unisys is under fire for allegedly failing to detect the hacking of U.S. Department of Homeland Security computers, an incident that resulted in data being sent to a Chinese-language Web site.
509671
For the third time since June, Pfizer Inc. has disclosed a data breach involving sensitive information about employees. Affected this time: As many as 34,000 workers.
496304
Every security professional is intimately familiar with the Law of Unintended Consequences; sometimes it even works in their favor. Case in point? The data-protection advances that RxHub needed to build to protect their real-time data-transport operation.
99082
In the weeks before key government tests of new radiation detection equipment, officials at the Department of Homeland Security helped contractors through repeated dry runs that enabled them to perform better during the examinations, according to government briefing documents obtained by The...
646903
The largest Homeland Security Department contractors include two companies which paid millions to settle charges they defrauded the Pentagon, one firm which paid a foreign corruption fine and a business accused of botching a computer system for veterans hospitals, records show.
273592
Some of the nation's most influential former military and intelligence officials are at risk of identity theft after a break-in at a major government contractor netted computers containing personal information about tens of thousands of employees.-The Washington Post
686971
HARTFORD, Conn. - More than 1,700 state workers recently learned that some of their personal information, including their names and Social Security numbers, had been inadvertently posted on the Internet.
282022
The Federal Bureau of Investigation is looking into a spate of bomb threats phoned in to businesses that resulted in employeesâ wiring thousands of dollars overseas.
266470
DigitalNet Holdings Inc. of Herndon will provide fingerprint identification services to the Homeland Security Department under a new $25 million contract.
358025
Invasive DHS system just like the one we're building, apparently EU officials are crying foul over Department of Homeland Security attempts to impose draconian and invasive data requirements on passengers travelling to the US. The US demands, however, are remarkably similar to the ones the EU itself proposes to make of passengers travelling to Europe, making the officials shouting "blackmail" and "troublesome" somewhat unlikely guardians of the citizenry's freedoms.â¦
404161
Government contractors, which have been riding a wave of unprecedented growth since the Sept. 11 attacks, are starting to feel the effects of an industry-wide slowdown as the government tightens its technology spending, according to company officials and industry observers.
289303
(InfoWorld) - The Department of Homeland Securityâs Computer Emergency Readiness Team (US-CERT) raised a few eyebrows in late November when it sent a warning out to U.S. banks and financial institutions about a possible cyber attack by Islamic militants. The alert, dated Nov. 30, was triggered by a posting on what the DHS considered an Islamic jihadi Web site calling for hackers to attack U.S. financial and banking Web sites, apparently to protest the detention of Muslims at Guantanamo Bay, Cuba. However, the warning was heavily qualified, with DHS calling the threat âmore aspirational than operational.â Financial firms downplayed the danger, too. One security executive at a major brokerage told InfoWorld that the warning was a ânon-event.â But could repeated warnings about such non-events eventually make critical infrastructure owners deaf to DHSâs warnings? InfoWorld Senior Editor Paul F. Roberts recently chatted with John Carlson, senior director of security and risk Assessment at BITS, a financial-services industry consortium focused on security, fraud, and risk management, about the DHS warning and state of the public-private partnership on cybersecurity. InfoWorld: Iâm guessing that your members received the US-CERT warning about the cyber terrorist attack? John Carlson: There were two messages sent: the first was [Nov. 30]; then a second revision came out [Dec. 1]. The gist of it was that these reports were not corroborated. IW: What was the reaction of BITS members to the warning? JC: Our members have an âall hazardsâ approach to business-continuity planning. Theyâve got well-developed approaches that have been bolstered since 9/11. In response to new regulatory requirements, firms have done a lot to improve backup, theyâve done tests with the various exchanges. Theyâre also working in closer harmony with the federal government to share information on threats and vulnerabilities. I think thereâs a spirit of appreciation that the government is willing to share information with the financial services industry. The firms take that information into account in responding and activating their business continuity plans. IW: How do your members apply information like this that comes from DHS? JC: Iâm not sure I can give a blanket answer. Each firm has its own mechanisms for gathering information. Risk-management professionals at these firms read the paper and understand the military conflicts and theyâre mindful of that. They take it into account when they have employees traveling. Theyâll monitor where they are. With the [bird flu] pandemic issue, firms were monitoring that closely and trying to figure out what impact it would have on their organizations. IW: Is there a danger from these warnings of creating a âBoy Who Cried Wolfâ situation, where firms begin to disregard the warnings? JC: Thereâs always a concern about the crying-wolf syndrome. But our firms appreciate getting the information even if itâs not corroborated. A continuous flow of information helps build trust between the private and public sectors. IW: Was this warning about the jihadist threat something that your members see all the time, or was this an unusual kind of warning from DHS? JC: I think the warning came across the transom at a high level [saying] âpay attention to this.â So it was different from what we normally get. Weâre getting a steady stream of information on threats and vulnerabilities and a range of things. For example, if thereâs a known virus thatâs being perpetrated in [the United States] or against a financial institution. Weâre also getting information on political changes around the world. IW: Do you think DHS has its arms around the cybersecurity problem? JC: My personal opinion is that the government has some capabilities, but not all capabilities. In general, our firms would like more information, but there are many reasons why if (the government) has the information they donât provide it. But itâs a touchy question. People have lots of different views. Â  IW: Do you feel like your members are getting all the information they need? JC: Thereâs some filtering, but I donât have information to compare or validate what the filter is. We talk about issues through coordinating councils that meet quarterly. Itâs a two way conversation.Â
99395
Contractor charged with defrauding the company of $10 million. Also: Mass. man allegedly uses false identities to order parts.
70475
Layered Technologies, a Texas-based server hosting company, told customers this week that hackers had broken into its support database and stolen as many as 6,000 client records.
544593
Representatives of the CWE (Common Weakness Enumeration) project, which launched in December 2005, reported to Black Hat DC attendees that progress continues on the project. The DHS-sponsored effort is currently sifting through "mountains" of vuln data, and they're in touch with the affected companies.
416606
(InfoWorld) - Fixing cybersecurity problems in the U.S. is a top priority at the U.S. Department of Homeland Security, said the agency's leader, but lawmakers didn't focus on the issue during a hearing in Congress Wednesday. Cybersecurity is a "very big issue" that DHS remains concerned about, said DHS Secretary Michael Chertoff, testifying before the House of Representatives Homeland Security Committee. Chertoff didn't go into details because much of the department's cybersecurity efforts are classified, he said. "I can assure you that we are working with other elements of the federal government and giving highest priority an enhanced strategy with respect to cybersecurity," he said. Cybersecurity threats have "enormous potential to do damage to the United States in years to come," Chertoff added. Chertoff testified before the committee in a hearing titled, "Holding the Department of Homeland Security Accountable for Security Gaps." But while cybersecurity problems continue inside and outside of the U.S. government, lawmakers focused on other issues during the hearing, including the hiring of border agents, training of bomb-sniffer dogs, and the scanning of airline cargo. Just this week, the U.S. Department of Defense acknowledged a successful attack on an unclassified e-mail system earlier this year. While not focusing on cybersecurity, committee chairman Bennie Thompson, a Mississippi Democrat, said DHS needs to improve in several areas. Thompson has criticized the department's cybersecurity efforts in the past, but cybersecurity issues were not on Thompson's list of top priorities for Chertoff in the remaining 16 months of U.S. President George Bush's administration. Instead, Thompson called on Chertoff to fill vacancies at DHS, to finish regulations for container security at ports, and to implement a biometric air passenger screening program. "We owe the American people security," Thompson said. "We owe them accountability. And most importantly, we owe them freedom from fear." Other than the short Chertoff statement on cybersecurity, the issue did not come up again in more than 90 minutes of questions from lawmakers. Representative Mike Rogers, an Alabama Republican, used part of his question time to complain to Chertoff that many bomb-sniffing dogs used by DHS came from overseas. Rogers urged Chertoff to find ways to breed bomb-sniffing and cadaver dogs in the U.S. "I'm concerned that we are increasingly relying on foreign imported dogs," he said.