README | Policy (2)
Steep costs, troubling questions roil DOD cybersecurity program rollout
Shaun Waterman
May 22, 2022
About 80,000 companies that sell to the U.S. military will need to pass a cybersecurity audit before they can bid for business under rules the Defense Department plans to impose next year. But many small defense contractors aren’t prepared for the brave new world of the Cybersecurity Maturity Model Certification (CMMC) program.
Documents reveal depth of anxiety over possible Russian cyberattacks on U.S. grid
Blake Thompson Heuer
February 13, 2022
A trove of emails from top Homeland Security officials expose how the U.S. government scrambled to ensure the defenses of American utilities after Russia brought down parts of Ukraine’s power grid in 2015.
Thousands of Pentagon contractors could buckle under cybersecurity push
Shaun Waterman
February 06, 2022
The Biden administration is forging ahead with a scaled-back plan to regulate cybersecurity in the vast and complicated defense industry marketplace. But the halting rollout of the Cybersecurity Maturity Model Certification, or CMMC, program illustrates the perils and pitfalls of rewriting supply chain cyber rules for the defense industrial base.
How I hacked my way to the top of DARPA’s hardware bug bounty
Malcolm Stagg
January 30, 2022
Go inside one of the most technically challenging bug bounties ever with the researcher who subverted secure hardware designed by MIT and the University of Cambridge.
Destructive malware is back in Ukraine. Will it usher in cyberconflict?
Blake Thompson Heuer
January 21, 2022
The WhisperGate malware masquerades as ransomware but really breaks computer files beyond repair.
Hackers square off to close gaps in satellite cybersecurity
Shaun Waterman
December 10, 2021
The second annual Hack-A-Sat competition pits security researchers against real satellite equipment as the U.S. military rushes to address space cybersecurity risks.
Space cyber wargame exposes satellite industry risks
Shaun Waterman
November 17, 2021
A tabletop exercise tested how space industry leaders would handle a potentially devastating breach of a satellite’s ground control uplink.
Space hacking risks pose cyber policy test for Biden admin
Shaun Waterman
November 02, 2021
The White House won’t be defining the space industry as critical infrastructure, despite mounting pressure from business and lawmakers.
CISA can’t succeed in the Pentagon’s shadow
Josephine Wolff
September 10, 2021
Congress and the Biden administration need to truly empower the civilian cybersecurity agency to drive real and effective change needed to defend the country against punishing cyberattacks.
Hacking space on the horizon for 2023
Shaun Waterman
August 07, 2021
U.S. Space Force is working on a plan for security researchers to attempt to pwn a live satellite orbiting earth in Hack-A-Sat 4.