DHS Confirms: "Attack Did Not In Fact Target A Transportation Entity"

News, of rather strong disputation, of a recently reported on memo, detailing the recent electronic attack (characterized as a cyber-attack) allegedly targeting our nation’s train system (actually a system near and dear to my heart up here in the Pacific Northwest).

“…”Following more in-depth analysis, it appears that the potential cyber incident did not in fact target a transportation entity,” a senior DHS official told CNET today. “DHS worked with the affected entity, the FBI, and the Transportation Information Sharing and Analysis Center (ISAC) to resolve the issue and send alerts to notify the community of the anomalous activity as it was occurring.” “The official, who asked to remain unidentified, declined to provide additional details…”

✄

TSA: Targeted Train Systems Hack (Maybe, Possibly - Oh, OK, We're Just Guessing...)

NextGov’s Aliya Sternstein  is reporting  a Transportation Security Admnistration [TSA] memo detailing an alleged system intrusion [attacking a Pacific Northwest rail company’s systems], and subsequent manipulation of those systems by assailants unknown; speculation of foreign attack was proffered by unamed TSA officials… Regardless, days after the event, DHS corrected the TSA ‘officials’ “…said following additional in-depth analysis, it appears that the rail infiltration may not have been a targeted attack…”

☃

Napolitano's Threat Modeling Technique: "It's Not Basketball"

In a recent, gaffe filled interview, Janet Napolitano, current Secretary of the Department of Homeland Security, let’s us know of her new-fangled Calculus of Credible Threats… Whilst obviously well meaning, it’s time for the Executive Branch to reign in the erstwhile Secretary.

“…Oh, I don’t rank them, this isn’t basketball or something,” Napolitano said Thursday, earning her a laugh at the start of a Washington Post Live event on cybersecurity. “Threats are threats.”..” - Janet Napolitano, DHS Secretary

⎳

New FISMA Regulatory Requirements Mandate Monthly Security Reporting

Federal agencies will begin reporting security data via transmitted data feeds to CyberScope, a compliance tool ostensibly created to assist overseers in an effort to actively facilitate the monitoring of cybersecurity. Of course being run by the Department of Homeland Security, proud owners of known compromised networks, seems rather ludicrous, don’t you think? Is it possible that Secretary Napolitano is not cognizant of the severe issues in her Agency? Enquiring minds should want to know…

☔