Colin Wolf reports: Less than a week after the 2023 Tampa Municipal Runoff Election results were officially certified, local officials are now saying a server at the Hillsborough County Supervisor of Elections Office was “illegally breached.” In a statement released Wednesday afternoon, Hillsborough County Elections Supervisor Craig Latimer stated that the breach did not interfere with…
Category: Government Sector
City of Dallas impacted by ransomware attack
Lori Brown reports: The City of Dallas is dealing with a ransomware attack that has infected its servers, limiting the delivery of City service. The city says security monitoring tools first spotted the attack on Wednesday morning. Read more at Fox4. Update: It looks like the Royal Ransomware gang is responsible for this one.
Suffolk, without a cyberattack recovery plan, hires chief to create one
Vera Chinese reports: Suffolk County’s new chief security information officer, announced Monday by County Executive Steve Bellone, will be charged with creating a recovery plan for potential cyberattacks in the future, administration officials said. The lack of a stand-alone recovery plan before a breach was discovered Sept. 8 likely contributed to the amount of time it has taken…
Key U.S. Marshals computers still down 10 weeks after breach
Devlin Barrett reports: A key law enforcement computer network has been down for 10 weeks, the victim of a ransomware attack that has frustrated efforts by senior officials to get the system back up and running — raising concerns about how to secure critical crime-fighting operations. While the initial breach of a computer system within…
Court records online include private information for thousands of Missouri residents
Josh Renaud reports: Documents containing Social Security numbers and other private information for thousands of Missourians are accessible to anyone using the Casenet website, the state’s judicial records system, the Post-Dispatch recently discovered. Missouri Supreme Court officials have acknowledged the issue after being alerted by the Post-Dispatch, and they fixed one vulnerability on Casenet. But…
Jack Teixeira’s February 2022 Logs. Why wasn’t the insider threat prevented or detected?
Over on EmptyWheel, natsec journalist and blogger Marcy Wheeler writes, “In a motion to keep Jack Teixiera jailed, the government provided more details about what an unstable nut they gave access to the US’ most sensitive secrets.” Read Marcy’s post. Reading the logs from the perspective of someone who has blogged about insider threats and data…