A consolidated list of federal artificial intelligence use cases released by the White House on Wednesday shows agencies more than doubled the amount of uses reported last year. Per the 2024 consolidated inventory, which is available on the Office of Management and Budget’s GitHub, 37 federal agencies have reported 1,757 public AI uses. A consolidated list released by the White House last year documented 710 use cases. The top three categories of uses, per a Chief Information Officer Council post Wednesday, were “mission-enabling (internal agency support), health and medical, and government services (includes benefits and service delivery).” The consolidated inventory is the product of an annual AI inventory process that was initially established in December 2020 and has continued to evolve. It gives the latest snapshot of how the federal government is handling the rapidly growing technology and reflects the Biden administration’s safety-based approach to AI.

Federal civilian agencies have a new list of cyber-related requirements to address after the Cybersecurity and Infrastructure Security Agency on Tuesday issued guidance regarding the implementation of secure practices for cloud services. CISA’s Binding Operational Directive (BOD) 25-01 instructs agencies to identify all of its cloud instances and implement assessment tools, while also making sure that their cloud environments are aligned with the cyber agency’s Secure Cloud Business Applications (SCuBA) configuration baselines.
CISA Director Jen Easterly said in a statement that the actions laid out in the directive are “an important step” toward reducing risk across the federal civilian enterprise, though threats loom in “every sector.”

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

The federal government discloses more than 1,700 AI use cases; CISA delivers new directive to agencies on securing cloud environments

The Cybersecurity and Infrastructure Security Agency unveiled a detailed set of guidelines Wednesday to safeguard the mobile communications of high-value government targets in the wake of the ongoing Salt Typhoon telecom breach. The guide aims to help both political and federal leadership harden their communications and avoid any data interception by the Chinese-linked espionage group. As of earlier this month, government agencies were still grappling with the attack’s full scope, federal officials told reporters. Among the targets were officials from both presidential campaigns, including the phone of President-elect Donald Trump. The advisory details several key practices intended to mitigate risks associated with cyber threats and raise awareness on techniques that can thwart any type of malicious actor.

The FBI’s ability to fully embrace artificial intelligence has been hamstrung by funding constraints and various workforce and technical challenges, according to a new watchdog report. The Department of Justice Office of the Inspector General said the FBI has “demonstrated initiative” and taken steps to “integrate AI capabilities in a manner consistent” with guidance from the Office of the Director of National Intelligence. But substantial progress has been difficult to come by due to barriers that have “impeded” more “accelerated adoption” of AI.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.


CISA issues guidance for high-value targets to secure mobile devices in the wake of Salt Typhoon; FBI’s AI efforts face funding and workforce barriers

🎙️ Au programme aujourd'hui :
🔓 Trio de vulnérabilités SQL Injection dans les pilotes Amazon Redshift
Trois failles critiques d’injection SQL (CVE-2024-12744, CVE-2024-12745, CVE-2024-12746) ont été découvertes dans les pilotes Amazon Redshift. Ces vulnérabilités permettent une escalade de privilèges et une compromission des données sensibles. 
Source : https://www.cysecurity.news/2024/12/trio-of-sql-injection-vulnerabilities.html

🌐 Neuvième brèche télécom liée aux hackers chinois selon la Maison Blanche
La Maison Blanche a identifié une neuvième entreprise télécom américaine touchée par la campagne de cyberespionnage chinoise menée par le groupe Salt Typhoon. 
Source : https://www.bleepingcomputer.com/news/security/white-house-links-ninth-telecom-breach-to-chinese-hackers/

🚨 Exploitation active d’une faille DoS dans les pare-feu Palo Alto Networks
Des attaquants exploitent la vulnérabilité CVE-2024-3393 pour redémarrer les pare-feu Palo Alto Networks, provoquant des interruptions critiques. Un correctif est disponible pour les versions supportées, et des solutions de contournement sont recommandées pour limiter les risques.
Source : https://www.bleepingcomputer.com/news/security/hackers-exploit-dos-flaw-to-disable-palo-alto-networks-firewalls/

🛠️ Multiples vulnérabilités dans le greffon Security QRadar Log Management AQL de IBM
L’ANSSI met en garde contre plusieurs vulnérabilités critiques dans le greffon Security QRadar Log Management AQL de IBM. Ces failles peuvent permettre à un attaquant distant d'exécuter des commandes arbitraires ou d'exfiltrer des données sensibles. IBM recommande l’installation immédiate des correctifs disponibles pour sécuriser vos systèmes.
Source : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1110/

📱 Hameçonnage ciblant les informations bancaires
Les tentatives de phishing augmentent pendant les fêtes, avec des campagnes ciblant les données bancaires des utilisateurs. Une campagne récente usurpe l’identité de la Banque de Montréal (BMO) via un faux site web et des SMS frauduleux.
Source : https://isc.sans.edu/diary/rss/31548

📞 Questions ou suggestions ?
Laissez-moi un message sur RadioCSIRT : 07 68 72 20 09
🎧 Écoutez-nous et abonnez-vous sur vos plateformes préférées :
Apple Podcasts, Deezer, Spotify, SoundCloud, YouTube, Amazon Music
🌐 Site officiel RadioCSIRT :
https://www.radiocsirt.org


RadioCSIRT #139 - Vos actualités quotidiennes en cybersécurité Samedi 28 décembre 2024

Mina Hsiang, administrator of the U.S. Digital Service, is one of the many technology officials who will depart federal service with the forthcoming change in administrations later this month. Hsiang, a longtime government digital services leader, was tapped to lead USDS as the beginning of the Biden administration and has now seen that role through to the term’s end. In a two-part exit interview with FedScoop report Caroline Nihill, Hsiang shares some of the highlights from the past four years — including a partnership with the Social Security Administraiton and the success of digital initiatives supporting COVID-19 vaccines and test kits — as well as her parting thoughts on her role, the need for technical leaders inside government agencies, and much more.

The Defense Department has tapped Kratos to develop a testbed for hypersonic vehicles under the Multi-Service Advanced Capability Hypersonic Test Bed 2.0 program, the company announced Monday. The other transaction authority agreement is for Task Area 1 of MACH-TB 2.0, an initiative that broadly aims to expand options for the Pentagon to demonstrate and validate hypersonic weapons and related technologies. If all options are exercised, the deal has a performance period of five years and a total value of $1.45 billion — the single largest contract ever awarded to the contractor.

 Former Defense Department Chief Information Officer Dana Deasy is now working at Boeing as the organization’s chief information digital officer and senior vice president for information technology and data analytics, the company announced Jan.3. Deasy served as the Pentagon CIO during the first Trump administration starting in May 2018 and oversaw a variety of high-profile modernization initiatives. He was at the helm when the department moved to large-scale telework as employees adapted to the COVID-19 pandemic, helped stand up the Joint AI Center and led the charge to enterprise cloud through the JEDI contract. 

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

An exit interview with USDS Administrator Mina Hsiang

HEAL Security Dispatch Daily Digest is a cybersecurity-focused podcast presented by HEAL Security, bringing expert insights and the latest developments in the ever-evolving digital security landscape. Hosted by Richard Simmons from London, this podcast explores the critical nexus between healthcare and cybersecurity, covering topics such as quantum-safe encryption, national security decisions impacting cybersecurity, evolving cyber threats, and regulatory actions. Recent discussions include Google's quantum-resistant digital signatures, Australia’s ban on Kaspersky software, a major North Korean cryptocurrency heist, and emerging malware threats. With a strong emphasis on healthcare cybersecurity and broader industry trends, the show provides essential updates to help professionals stay ahead of cyber risks and advancements in security technology. 
https://healsecurity.com/

Google Cloud's Quantum-Safe Security, Australia Bans Kaspersky, and North Korea's $1.5B Crypto Heist

HEAL Security Dispatch Daily Digest is your essential daily briefing on the latest cybersecurity trends, threats, and expert insights, with a focus on the healthcare sector. Hosted by Richard Simmons from London, this podcast navigates the evolving landscape of cybersecurity, covering topics such as AI integration, cybercrime, malware detection, and software vulnerabilities. In this episode, key discussions include the challenges of securing enterprise AI, a cybercrime ring's fraudulent Taylor Swift ticket scheme, real-time network traffic analysis for Linux malware, and CISA advisories on industrial control system vulnerabilities. Additionally, the episode highlights a typosquatting malware campaign, security risks in open-source repositories, Microsoft's OneDrive backup prompts, and a critical Kibana vulnerability update. Stay informed with HEAL Security Dispatch Daily Digest for timely cybersecurity intelligence. 
https://healsecurity.com/

HEAL Security Dispatch: Microsoft 365 Backup Prompts, and AI Security Challenges

In this episode, Greg Otto talks with Sunil Mallik, the CISO of Discover Financial Services. Sunil shares his career path and the evolving challenges and responsibilities in cybersecurity, covering how he communicates with his board, strategic approaches to cybersecurity, and the importance of balancing technological investment with personnel training.

In our reporter chat, Greg talks with Tim Starks about Sean Plankey being nominated for CISA director. 

Editor's Note: At 13:42, Mallik misspoke about his former employer. He was previously employed by Freddie Mac, not Fannie Mae.

Discover’s Sunil Mallik on the ever-changing roles of the CISO

HEAL Security Dispatch Daily Digest is your essential daily briefing on the latest cybersecurity trends, with a special focus on healthcare and critical infrastructure. Hosted by Richard Simmons from London, this podcast delivers expert insights into emerging threats, vulnerabilities, and security challenges shaping the digital world. In this episode, we cover critical issues including an expiring root certificate affecting Firefox functionality, widespread failures in 2nd generation Chromecast devices, and a major ransomware wave by the Medusa group targeting 300 organizations. We also examine Microsoft's discovery of a more advanced macOS malware variant, a phishing scam impersonating Booking.com, a newly exposed vulnerability in Juniper Networks' Junos OS, and the potential misuse of the DeepSeek AI model for cybercriminal activities. Stay informed with HEAL Security Dispatch Daily Digest, your trusted source for cybersecurity intelligence. 
https://healsecurity.com/

HEAL Security Dispatch: Firefox & Chromecast Crashes, Medusa Ransomware Surge, and AI Exploits

Customs and Border Protection’s Office of Information Technology says it’s reviewing the loss of three physical servers, a public records request shows. According to a document produced by CBP’s Cybersecurity Directorate, about 200 government devices have been stolen or gone missing in recent years. Of these devices, 140 were cell phones, and just under 40 were laptops. No items were reported to be lost abroad, according to the document. That federal employees would have lost phones and tablets isn’t surprising. FedScoop has reported on lost electronics at the U.S. Agency for International Development and NASA, and agencies often review inventories of employee devices. Still, the loss of government-furnished equipment can raise concerns about the security of sensitive data. Some federal employees have even been caught stealing government IT equipment in order to sell it. The loss of three servers is somewhat unusual. The agency did not answer a series of questions about the lost servers, including what data they might have held or whether the losses were ever reported to law enforcement. In response to FedScoop questions, an agency spokesperson said, “CBP is currently reviewing this issue.”

The Cybersecurity and Infrastructure Security Agency must brief Congress on proposed deep cuts to agency personnel, a top Democrat said in a letter to its acting director. California Rep. Eric Swalwell, ranking member of the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection, wrote in the letter to acting Director Bridget Bean on Thursday that CISA is obligated to notify Congress of its plans. CISA reportedly plans to cut agency staff by nearly 40%, or 1,300 people. Swallwell wrote in his letter that “upending an agency that plays such an important role in defending the homeland while keeping Congress in the dark is wholly unacceptable,” adding that CISA hasn’t provided the subcommittee any justification for the cuts or explained how it will execute its congressionally mandated mission with a fraction of the workforce and resources. CISA had already cut 130 probationary staffers, a move blocked in court before being overturned in an appeal.

The Daily Scoop Podcast is available every Monday-Friday afternoon.
If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

CBP servers go missing; Rep. Swalwell demands a Hill briefing on planned CISA personnel cuts

The HEAL Security Dispatch Daily Digest is a concise and insightful podcast delivering the latest in cybersecurity news with a focus on healthcare and critical infrastructure. Hosted by Richard Simmons from London, each episode covers high-impact stories such as zero-day exploits, major software patch releases from tech giants like Microsoft and Adobe, data breaches affecting healthcare providers and retailers, and policy shifts by organizations like CISA. The podcast also highlights the human and legal dimensions of cybersecurity through coverage of cybercrime prosecutions and industry leadership changes. Designed for professionals and enthusiasts alike, the Daily Digest offers essential updates and expert commentary in a rapidly evolving digital security landscape. 
https://healsecurity.com/

Microsoft, Adobe, Ascension Health, and UnitedHealth in the Spotlight

A podcast covering the latest news & trends facing top government leaders on topics such as technology, management & workforce. Hosted by Billy Mitchell on FedScoop and released Monday-Friday.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

New tracks tagged #CISA