“Federal agencies responsible for safeguarding the security and personal data of millions of Americans have failed to implement basic defenses against cyberattacks, according to a report from Senate investigators released Tuesday.” - 8/3/21 1/ cbsnews.com/news/federal-c…
“The agencies earned a C- report card for falling short of federally-mandated standards in the 47-page report by the Senate Homeland Security Committee.” 2/
“The audit accuses eight critical agencies, including the Department of Homeland Security (DHS), the State Department and the Social Security Administration (SSA) of relying on outdated systems, ignoring mandatory security patches and failing to protect sensitive data…3/
…such as names, date of birth, income, social security numbers and credit card numbers.” 4/
“Tuesday's evaluation also found that EINSTEIN, DHS's flagship cybersecurity program for federal agencies, suffers from ‘significant limitations in detecting and preventing intrusions.’” 5/
“Congressional investigators recommended an ‘update’ to Einstein that justifies its cost. Authorization of the program with a price tag in the billions is set to expire in 2022.” 6/
“All agencies failed to comply with statutory requirements to certify to Congress they have implemented certain key cybersecurity requirements including encryption of sensitive data, least privilege, and multi-factor authentication," said the report..” 7/
“In April 2021, Chinese state-sponsored hackers breached five federal agencies through vulnerabilities in products from a popular, Utah-based software company, Pulse Connect Secure. Russian-linked criminals compromised nine federal agencies and 100 private sector groups… 8/
… through a supply-chain hack of Solarwinds, first discovered in December 2020.” 9/
Article by @NicoleSganga 10/
• • •
Missing some Tweet in this thread? You can try to
force a refresh
