Author Archive

David DiMolfetta

David DiMolfetta

Cybersecurity Reporter, Nextgov/FCW

David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta
Tech

Federal CIO defends Login security after health agency dropped it from grantee system

Clare Martorana doubled down on Login’s capabilities, saying the government “needs to continue to rely” on the tool.

Management

Biden signs extension of controversial spying program into 2026

The Section 702 authorities were reauthorized without the addition of a warrant requirement to review the communications of Americans caught up in foreign surveillance.

Oversight

HHS removed Login from its grantee payment system after funding theft

Hackers used data from a federal contracting hub to steal funding from seven grantee organizations in an HHS breach that occurred last year. Both HHS and GSA say that Login.gov was not compromised or connected to the theft.

Management

House advances spy power reauthorization bill without warrant measure

The bill — which represents a win for Biden administration policy objectives — will now be taken up in the Senate, with a week to go before the authority sunsets.

Oversight

Russian hackers accessed federal agencies' emails in Microsoft breach, CISA says

The alert comes a week after Microsoft was faulted in a Homeland Security Department report for fostering a security culture that enabled a similar China-backed cyberattack last year.

Tech

Congress tries again for comprehensive data privacy bill

The bill would establish national data privacy standards, with the Federal Trade Commission crafting rules for enforcement.

Management

DOD stands up a new civilian-facing cyber policy office

The nominated head of the new Pentagon office is awaiting confirmation in Congress.

Tech

U.S. accuses Chinese hackers of a 14-year campaign targeting government officials

The coordinated charges include sanctions on Chinese government-affiliated hackers and an up to $10 million reward for information about the defendants.

Tech

U.S. still finding victims of advanced China-linked hacking campaign, NSA official says

The Volt Typhoon hacking collective, backed by the Chinese People’s Liberation Army, has been working to burrow into sensitive U.S. systems, officials previously said.

Tech

Ex-NSA innovation chief’s new startup looks to future-proof federal agencies against cyberthreats

Kevin Keaton’s Eyris would fuse blockchain technologies into advanced security solutions to defend federal agencies, the Pentagon and others against cyber threats.

Tech

CISA targeted through Ivanti VPN vulnerabilities, reports say

The DHS agency has been issuing warnings about Ivanti products since at least 2020.

Management

New bill aims to bring SNAP card security up to credit card standards

Security standards for SNAP cards have not kept pace with industry advancements, lawmakers say.

Tech

Government facilities were third largest ransomware target in 2023, FBI says

The FBI’s IC3 findings also show government official impersonation scams are on the rise.

Tech

FCC staff targeted in phishing attack that cloned agency login site

A cybercriminal group built a duplicate webpage used by employees to validate their login credentials.

Tech

Energy to fund 16 infrastructure cybersecurity projects 

The White House’s cybersecurity strategy implementation plan asks the agency to identify pilot projects for energy infrastructure security.

Defense

Top Pentagon IT official departs deputy CIO role

Lily Zeleke will be taking over “new responsibilities” at the agency, though it’s still unknown what her new position is.

Tech

Biden to sign executive order boosting cybersecurity of ports, maritime vessels

The order empowers the Coast Guard to shore up cyber protections for maritime systems and harden current cyber incident reporting rules.

Tech

NSA cyber director to step down after 34 years of service

His departure comes amid heightened security fears in 2024 and debate over whether to renew a controversial spying power.