theDocumentId => 1335333 NSA to Form New Cybersecurity Directorate

Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

03:20 PM

NSA to Form New Cybersecurity Directorate

Anne Neuberger will lead the directorate, which aims to bring together the NSA's offensive and defensive operations.

The National Security Agency announced plans to form a cybersecurity directorate later this year as part of a larger initiative to fuse its offensive and defensive operations, a years-long ongoing integration that has broadened under the leadership of General Paul Nakasone.

As the NSA has undergone reorganizations in recent years, it has lost its emphasis on cybersecurity, said Gen. Nakasone during the International Conference on Cyber Security at Fordham University, the Wall Street Journal reports. The new directorate is intended to once again make security a priority by combining it with the NSA's foreign intelligence projects and increasing its focus on both national security networks and the defense industrial base.

Anne Neuberger has been appointed head of the new directorate, which will reportedly leverage more signals intelligence from operations against US adversaries. Its goal is to strengthen national security by sharing intel with other federal agencies and private companies. The directorate will take the place of the NSA's current information assurance directorate.

Neuberger, who currently sits on the NSA board of directors, was its first chief risk officer and part of the team that helped build Cyber Command. In the past year she has overseen the NSA's election security efforts leading up to, and during, the 2018 midterms, which the WSJ says saw more aggressive efforts from the NSA and the US Cyber Command to defend against Russian interference and share more information with agencies including the FBI and DHS.

In her new role, Neuberger will report to Gen. Nakasone. Read more details here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Recommended Reading:

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
User Rank: Ninja
7/24/2019 | 8:28:32 PM
They already have another group called TAO

TAO is reportedly "now the largest and arguably the most important component of the NSA's huge Signals Intelligence Directorate (SID)[8] (SIGINT), consisting of more than 1,000 military and civilian computer hackers, intelligence analysts, targeting specialists, computer hardware and software designers, and electrical engineers" - Wikipedia

As the NSA has undergone reorganizations in recent years, it has lost its emphasis on cybersecurity, said Gen. Nakasone during the International Conference on Cyber Security at Fordham University, the Wall Street Journal reports. - Dark Reading

Wait, I am confused, NSA already has a group called TAO that is directly responsible for Stuxnet and Nitro Zeus creation. That group is an offensive and defensive group where they utilize the various tools (some that have been stolen by Shadow Brokers) that are a combination of exploits and vulnerabilities found in OS, Network, Protocols, and other signal communication tools.

There is also a group called "Cyber Command" that is specifically responsible for offensive tactics.
"USCYBERCOM was created in mid-2009 at the National Security Agency (NSA) headquarters in Fort George G. MeadeMaryland. It cooperates with NSA networks and has been concurrently headed by the Director of the National Security Agency since its inception.[1] While originally created with a defensive mission in mind, it has increasingly been viewed as an offensive force.[1] On 18 August 2017, it was announced that USCYBERCOM would be elevated to the status of a full and independent unified combatant command.[2] This elevation occurred on 4 May 2018." - Wikipedia

USCybercom is an offensive entity that is responsible for cybersecurity operations under the direction of the NSA. I am trying to figure out if they have two groups that are responsible for offensive and defensive cybersecurity tactics, why did Nakasone say that they did not have groups to address the cybersecurity issues at Ft. Belvoir and Ft. Meade? 

I think it is because they want to increase the fiscal portfolio, if they can create another directorate, this will give them the ability to expand and sustain the cybersecurity budget. But this happens all the time, the misuse of money and power to feed their own personal power obsession.

I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2021-07-27
Discourse is an open source discussion platform. In versions prior to 2.7.7 there are two bugs which led to the post creator of a whisper post being revealed to non-staff users. 1: Staff users that creates a whisper post in a personal message is revealed to non-staff participants of the personal mes...
PUBLISHED: 2021-07-27
xmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes durin...
PUBLISHED: 2021-07-27
Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI ("Web Application Open Platform Interface") protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a credentials or IP check. Whilst th...
PUBLISHED: 2021-07-27
In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.
PUBLISHED: 2021-07-27
IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196073.