Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

7/24/2019
03:20 PM
50%
50%

NSA to Form New Cybersecurity Directorate

Anne Neuberger will lead the directorate, which aims to bring together the NSA's offensive and defensive operations.

The National Security Agency announced plans to form a cybersecurity directorate later this year as part of a larger initiative to fuse its offensive and defensive operations, a years-long ongoing integration that has broadened under the leadership of General Paul Nakasone.

As the NSA has undergone reorganizations in recent years, it has lost its emphasis on cybersecurity, said Gen. Nakasone during the International Conference on Cyber Security at Fordham University, the Wall Street Journal reports. The new directorate is intended to once again make security a priority by combining it with the NSA's foreign intelligence projects and increasing its focus on both national security networks and the defense industrial base.

Anne Neuberger has been appointed head of the new directorate, which will reportedly leverage more signals intelligence from operations against US adversaries. Its goal is to strengthen national security by sharing intel with other federal agencies and private companies. The directorate will take the place of the NSA's current information assurance directorate.

Neuberger, who currently sits on the NSA board of directors, was its first chief risk officer and part of the team that helped build Cyber Command. In the past year she has overseen the NSA's election security efforts leading up to, and during, the 2018 midterms, which the WSJ says saw more aggressive efforts from the NSA and the US Cyber Command to defend against Russian interference and share more information with agencies including the FBI and DHS.

In her new role, Neuberger will report to Gen. Nakasone. Read more details here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
tdsan
50%
50%
tdsan,
User Rank: Ninja
7/24/2019 | 8:28:32 PM
They already have another group called TAO

TAO is reportedly "now the largest and arguably the most important component of the NSA's huge Signals Intelligence Directorate (SID)[8] (SIGINT), consisting of more than 1,000 military and civilian computer hackers, intelligence analysts, targeting specialists, computer hardware and software designers, and electrical engineers" - Wikipedia

As the NSA has undergone reorganizations in recent years, it has lost its emphasis on cybersecurity, said Gen. Nakasone during the International Conference on Cyber Security at Fordham University, the Wall Street Journal reports. - Dark Reading

Wait, I am confused, NSA already has a group called TAO that is directly responsible for Stuxnet and Nitro Zeus creation. That group is an offensive and defensive group where they utilize the various tools (some that have been stolen by Shadow Brokers) that are a combination of exploits and vulnerabilities found in OS, Network, Protocols, and other signal communication tools.

There is also a group called "Cyber Command" that is specifically responsible for offensive tactics.
"USCYBERCOM was created in mid-2009 at the National Security Agency (NSA) headquarters in Fort George G. MeadeMaryland. It cooperates with NSA networks and has been concurrently headed by the Director of the National Security Agency since its inception.[1] While originally created with a defensive mission in mind, it has increasingly been viewed as an offensive force.[1] On 18 August 2017, it was announced that USCYBERCOM would be elevated to the status of a full and independent unified combatant command.[2] This elevation occurred on 4 May 2018." - Wikipedia

USCybercom is an offensive entity that is responsible for cybersecurity operations under the direction of the NSA. I am trying to figure out if they have two groups that are responsible for offensive and defensive cybersecurity tactics, why did Nakasone say that they did not have groups to address the cybersecurity issues at Ft. Belvoir and Ft. Meade? 

I think it is because they want to increase the fiscal portfolio, if they can create another directorate, this will give them the ability to expand and sustain the cybersecurity budget. But this happens all the time, the misuse of money and power to feed their own personal power obsession.

Todd  
Tor Weaponized to Steal Bitcoin
Dark Reading Staff 10/18/2019
Data Privacy Protections for the Most Vulnerable -- Children
Dimitri Sirota, Founder & CEO of BigID,  10/17/2019
State of SMB Insecurity by the Numbers
Ericka Chickowski, Contributing Writer,  10/17/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
2019 Online Malware and Threats
2019 Online Malware and Threats
As cyberattacks become more frequent and more sophisticated, enterprise security teams are under unprecedented pressure to respond. Is your organization ready?
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-9501
PUBLISHED: 2019-10-22
The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.
CVE-2019-16971
PUBLISHED: 2019-10-22
In FusionPBX up to 4.5.7, the file app\messages\messages_thread.php uses an unsanitized "contact_uuid" variable coming from the URL, which is reflected on 3 occasions in HTML, leading to XSS.
CVE-2019-16972
PUBLISHED: 2019-10-22
In FusionPBX up to 4.5.7, the file app\contacts\contact_addresses.php uses an unsanitized "id" variable coming from the URL, which is reflected in HTML, leading to XSS.
CVE-2019-16973
PUBLISHED: 2019-10-22
In FusionPBX up to 4.5.7, the file app\contacts\contact_edit.php uses an unsanitized "query_string" variable coming from the URL, which is reflected in HTML, leading to XSS.
CVE-2015-9496
PUBLISHED: 2019-10-22
The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.