Top Intel Community
Mobile threats prompt operational changes for gov’t staff.
Eighty-seven percent of public sector employees surveyed in the 2022 Verizon Mobile Security Index said they have been forced to re-evaluate how they operate as attacks on mobile devices grow. Among enterprise respondents, 23% said their organization had suffered a mobile security compromise. Of those, 74% said the impact of compromising their mobile security was major, while 34% said it had lasting repercussions, which included spending money to clean up from an attack and bolstering defenses to prepare for the next one. Across all respondents, 79% said that shift to remote or hybrid work has undermined the cybersecurity of their organizations, as remote work can make them more vulnerable to an attack due to the distribution of devices and less secure networks. Almost half of organizations said they suffered a cyber compromise in the last 12 months, up 22% from the same period in the previous year. Yikes!
Log4j vulnerability prompts lawmakers to examine agency cyber measures.
House Energy and Commerce Committee Leaders sent letters to several federal agencies requesting briefings to address concerns about how the federal government is identifying and mitigating potential issues with network security. In the letters, the house leaders requested information about “the open-source software vulnerability—Apache Log4j.” House E&C leaders asserted their concern that government agency systems may be exposed to this vulnerability because of its scope. The committee leaders asked each agency about the vulnerability’s scope, when the agency first learned about it, the measures that were taken to mitigate its effects, vulnerability detection and identification tools and incident alert thresholds, among other things.
Technologists need a voice at the highest levels of federal decision-making.
Noreen Hecmanczuk, digital experience adviser to the federal chief information officer, said that the Office of the Federal CIO is working hard to ensure staff with technology expertise have a seat at the table during C-suite strategy discussions. Hecmanczuk explained that the federal CIO’s office, housed in the OMB, is “trying to get technologists in the room earlier and often. We want to focus on the C-suite — they also have a huge responsibility to protect the safety and security of the systems that we manage on behalf of the American people, and so technologists are hugely important to them.”