Author Archive

David DiMolfetta

David DiMolfetta
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta . If you have a tip you'd like to share, David can be securely contacted at djd.99 on Signal.
Cybersecurity

DHS secretary plans post-election security review

Markwayne Mullin told CISA employees he wants to assess election systems after the vote, as the agency faces scrutiny over cuts to its support for states.

Cybersecurity

White House takes Texas water cybersecurity model to rural hospitals

Project Lifeline 250 will provide free cybersecurity assistance to South Carolina hospitals, extending the administration’s effort to connect vulnerable infrastructure operators with industry support.

People

Russia targets Democrats and Ukraine supporters ahead of midterms, top intel lawmakers say

Sen. Mark Warner, D-Va., and Rep. Jim Himes, D-Conn., described Russian disinformation and more targeted Chinese influence efforts during a press roundtable, while reporting better access under intelligence chief Jay Clayton.

People

Officials see gaps in election communications as AI makes foreign influence easier

Sources describe weakening cooperation between the federal government and state and industry partners ahead of the midterms, as AI gives foreign operatives cheaper ways to produce and spread deceptive messages.

Management

Renewed CISA support comes too late for midterm prep, some election officials say

Arizona still plans to accept federal help on Election Day, while officials warn that staffing cuts have weakened relationships and left smaller jurisdictions with fewer resources.

Cybersecurity

CISA pledges election security support after cuts weakened ties with states

A new plan emphasizes threat sharing and coordination ahead of the midterms, but does not explain how those commitments fit with proposed cuts to dedicated election security funding.

Cybersecurity

White House launches water cybersecurity pilot in Texas

Project Watershed 250 will stress-test utilities over six months and could serve as a model for protecting water providers nationwide.

Cybersecurity

White House to soon launch water provider cyber protection program

The plans come as several states face water system intrusions from what some official suspect could be linked to Iran.

Cybersecurity

Treasury sanctions Iranian hackers tied to critical infrastructure breaches

Four of the five people named in the cyber action were also charged last week in the Justice Department’s expanded Mabna Institute case.

People

Voting machine researchers say federal work abruptly ended after Trump ally pushed back on their findings

Mojave Research executives said at DEF CON that the government had been preparing to expand the company’s election security work, and linked Trump adviser Kurt Olsen to pressure they faced after finding election system vulnerabilities but no evidence votes were altered.

Cybersecurity

New ‘Water Watch Center’ launched to help small utilities stop cyberattacks

The initiative comes as multiple states grapple with intrusions into their water systems that some officials suspect could be tied to Iran.

Cybersecurity

Chinese telecom firms kept footholds in US networks despite federal crackdowns, House probe finds

China Mobile, China Telecom and China Unicom retained equipment, data center space and network ties after FCC restrictions, including a China Mobile-linked network that appeared in routes to Salt Typhoon servers.

Cybersecurity

CISA urges water utilities to take exposed systems down after Minnesota hacks

A memo distributed to water industry members and obtained by Nextgov/FCW makes mention of Iran but does not directly present evidence attributing the latest Minnesota incident to the country.

Cybersecurity

FCC blocks approval of new foreign-made robots, power inverters

National security agencies said the devices could create supply-chain vulnerabilities, threaten critical infrastructure and enable surveillance or remote manipulation.

Cybersecurity

Russian hackers can steal government emails without victims clicking a link, cyber agencies warn

The Russia-linked Laundry Bear group has compromised more than 10 Western organizations through malicious emails that can trigger an exploit when they are viewed or previewed.

Artificial Intelligence

AI, once relegated to helping hackers with certain tasks, can now power every stage of a cyberattack

Researchers determined that AI was used in steps across entire cyber operations to identify security flaws, generate commands and carry out parts of intrusions, sometimes with little human oversight. Both U.S. and Chinese AI models have been involved.

People

Trump empties out election commission leadership just months before midterms

The shake-up raises questions about voting system certification, federal election security coordination, and the commission’s ability to approve key policy decisions.

Cybersecurity

US officials see Iran cyber threat persisting despite preliminary deal

Officials’ views reflect a recurring concern that cyber operations would continue regardless of conflict status, even as the Trump administration pursues a diplomatic off-ramp with Tehran.

Exclusive Cybersecurity

Lawmaker proposes overhaul of critical infrastructure cyber plans as AI threats rise

The measure would require CISA to refresh long-outdated sector cybersecurity plans as lawmakers warn that advanced AI tools could accelerate the discovery and exploitation of software flaws.

Cybersecurity

Lawmaker unveils bill to restore cyber information-sharing program funding

Mark Warner, the top Democrat on the Senate Intelligence Committee also sent letters to DHS Secretary Markwayne Mullin and to every governor urging them to support state and local cyber defense.