Cybersecurity on CrossGov.com

DHS Investigates Potential Breach After 41,000 ICE, CBP and CISA Staff Records Published Online

Thu, 29 Oct 2026 00:00:00 +0000

The Department of Homeland Security says it is looking into a potential breach after a searchable directory of more than 41,000 of its employees and contractors went online on October 28. The records name staff at ICE, CBP, Homeland Security Investigations, USCIS and CISA, with titles, offices, work phone numbers, email addresses, managers and the internal access groups each person belongs to. Some of those groups point to undercover and surveillance work.

OFAC Sanctions Rwandan Defense Ministry Over M23 and 11 Facilitators of North Korean IT Worker Fraud

Thu, 29 Oct 2026 00:00:00 +0000

Treasury’s Office of Foreign Assets Control added 13 names to the SDN list on October 28 in two separate actions. Ten people and one company tied to North Korea’s overseas IT worker schemes were designated. So were Rwanda’s Ministry of Defence and a Rwandan savings society that pays for the army backing the M23 rebels in eastern Congo.

The two cases have nothing in common on the ground. What links them is the tool. Both rest on executive orders, both block any property under US jurisdiction, and both came out of Treasury on the same afternoon without a vote in Congress.

NSA, CISA and NIST Issue Incident Response Practices for Superintelligence Agents That Act on Their Own

Wed, 28 Oct 2026 00:00:00 +0000

The National Security Agency, CISA and NIST published 10 practices on October 20, 2026, for handling what they call “SI control incidents”: cases where a highly capable AI agent, in the new federal vocabulary a Super Intelligence agent, takes serious actions nobody told it to take.

The guidance is titled “Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation.” It is a Cybersecurity Information Sheet, version 1.0, cleared for public release. The authors are NSA’s Super Intelligence Security Center, NIST’s Center for Advancing Innovation and Standards for Super Intelligence and the Cybersecurity and Infrastructure Security Agency. No foreign agencies co-signed it.

GAO Finds None of 24 Agencies Ready for Post-Quantum Encryption, and 16 Say It Is Too Early to Test

Tue, 20 Oct 2026 00:00:00 +0000

GAO reported on October 6 that none of the 24 largest federal agencies has fully done the groundwork OMB set for moving to post-quantum encryption, and 23 haven’t tested it at all.

The report, GAO-27-108740 (reissued with revisions on October 14), is the public version of a sensitive audit GAO sent to agencies in September 2025. It took a year to clear the redactions. In that year the White House raised the stakes: an executive order in June set hard dates for the switch, and OMB followed with a migration memo. The public report shows agencies starting that clock from far behind.

DOJ Indicts 14 in North Korean IT Worker Scheme and Raids More Than 40 Texas 'Laptop Farms' as FBI Warns Contractors

Wed, 14 Oct 2026 00:00:00 +0000

The Justice Department announced on October 13 a new crackdown on North Korean IT workers who get remote jobs at US companies under false identities and send their pay to Pyongyang’s weapons programs.

A federal grand jury in the Northern District of Ohio indicted 14 people. Two US-based facilitators were arrested, named by the department as Bostelle and Pena Carrillo. According to the indictment, the scheme placed workers at more than 70 US companies and earned about $3 million.

FBI Seizes Chinese Contractor's Hacking Tools Used Against US Agencies as CISA's Patch Deadline Passes

Mon, 12 Oct 2026 00:00:00 +0000

The FBI has seized seven internet domains used to run two hacking tools, MicroScan and FishHub, operated by Integrity Technology Group, a Beijing company with Chinese government contracts. US and allied agencies tie the company to the hacking group known as Flax Typhoon. A joint advisory from CISA, the FBI and the NSA, with Australia, Canada, Japan, New Zealand, Spain and Britain, lists victims including US government agencies, manufacturers, hospitals, IT firms, law enforcement, schools and religious groups.

FedRAMP 20x Reaches 538 Certified Cloud Services on a $10 Million Budget, While Europe Still Has No Common Cloud Certification

Sat, 10 Oct 2026 00:00:00 +0000

FedRAMP is the US government’s security approval for cloud services. If a federal agency wants to run its work on someone’s cloud, the service generally needs FedRAMP clearance first. In fiscal 2026, which ended on September 30, the program issued 92 new certifications, bringing the total to 538 cloud offerings. Agencies issued 760 new authorizations to use them.

It did that with 17 federal employees, 15 contractors and a budget of $10 million, of which it spent just under $9 million.

CISA's Cyber Incident Reporting Rule Sits at OIRA as the Agency Shrinks to 2,200 Staff Without a Confirmed Director

Thu, 08 Oct 2026 00:00:00 +0000

The final rule under the Cyber Incident Reporting for Critical Infrastructure Act, known as CIRCIA, went to the White House Office of Information and Regulatory Affairs for review on October 1, 2026. It hasn’t been published. When it is, it will require critical infrastructure companies to report significant cyber incidents to the Cybersecurity and Infrastructure Security Agency within 72 hours, and ransom payments within 24 hours.

Congress passed CIRCIA in March 2022. The law gave CISA until 2025 to write the final rule. It’s more than a year late.

US Cyber Information-Sharing Law Runs on Stopgaps While the EU Cyber Resilience Act Reporting Clock Starts

Tue, 06 Oct 2026 00:00:00 +0000

On September 11, 2026, a new obligation started for every company selling software or connected hardware in the EU. If a vulnerability in one of their products is being actively exploited, they now have 24 hours to send an early warning, 72 hours to file a notification, and 14 days after a fix is available to send a final report. It applies to products already on the market too. ENISA, the EU cybersecurity agency, opened its single reporting platform the same day.

CISA's Midterm Election Security Plan Leaves States and Counties Paying for What Washington Used to Provide

Fri, 25 Sep 2026 00:00:00 +0000

On September 24, six weeks before the midterms, the Cybersecurity and Infrastructure Security Agency released its 2026 Election Infrastructure Security Plan. It promises monthly classified threat briefings with the FBI and intelligence agencies at more than 70 secure sites, a free threat-sharing platform linked to state fusion centers, and election advice from CISA’s ten regional directors.

What it doesn’t include is the dedicated election staff and funding the agency cut in 2025. The plan gives no staffing numbers or budget, and doesn’t mention the information-sharing center most counties used.