Risk
12/22/2010
02:18 PM
50%
50%

State Department Announces Cybersecurity Post

The position, planned before the recent WikiLeaks exposure, will report directly to Secretary of State Hillary Clinton and work to prevent data breaches involving confidential diplomatic information.

Top 10 Government Stories Of 2010
(click image for larger view)
Slideshow: Top 10 Government Stories Of 2010
The U.S. State Department has created a new post aimed at coordinating agency cyber and cybersecurity efforts, including those that will protect confidential communication between the U.S. and other governments.

The department unveiled the new post in the First Quadrennial Diplomacy and Development Review, released this week.

The creation of the Office of the Coordinator for Cyber Issues was planned before the controversial publishing of 250,000 confidential U.S. diplomatic cables several weeks ago on the WikiLeaks website, officials said. Ostensibly, the new coordinator will help prevent such breaches and the international furor they cause in the future.

Indeed, cybersecurity in general has been a key focus for the Obama administration, and federal agencies are working across the board to develop better policies and technology to protect government networks. After WikiLeaks and then a host of international news agencies published the cables -- an event that's become known as Cablegate -- preventing data breaches caused by trusted government insiders has taken on new significance.

The new cyber coordinator is tasked with uniting disparate elements of the state department working on cyber issues to "more effectively advance U.S. cybersecurity and other cyber interests," according to the report.

The coordinator also will steer all of the department's global diplomatic engagement on cyber and cybersecurity issues. The as-yet-to-be named official also will act as the department's primary liaison to the president's cybersecurity coordinator and to other federal agencies as they move ahead with cybersecurity efforts.

State Department bureaus now must name representatives to work directly with the new cyber coordinator, which will reside in the office of Secretary of State Hillary Clinton and report directly to her.

A new cyber advisory council, chaired by deputy secretary of state James B. Steinberg, will be in charge of guiding the work of the cyber coordinator. Other permanent members of the cyber advisory council are the under secretary for economic growth, energy, and the environment; the under secretary for arms control and international security; and the under secretary for management.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "I've seen worse.  Last week Tim had a dragon."
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.