Attacks/Breaches

1/10/2018
03:18 PM
50%
50%

FBI Director: Cryptocurrency, Nation-State Attacks, Among Agency's Top Cybersecurity Concerns

Speaking at International Conference on Cyber Security, FBI director Christopher Wray pointed to a rise in nation-state attacks - and strong encryption that limits bureau investigations.

FBI Director Christopher Wray outlined a list of growing cybersecurity concerns his agency faces during a speech this week at the International Conference on Cyber Security in New York.

A rise in nation-state sponsored computer intrusion attacks, growing frequency in "blended threats" involving nation-states that hire cybercriminals to do the work, advancements in artificial intelligence, and the emergence of cryptocurrency, are all contributing to the concerns and challenges to the agency, Wray says.

He also cited an increase in the number of cases where the FBI was unable to access electronic evidence. Last fiscal year, the number of those type of cases included 7,775 devices. "The FBI supports information security measures, including strong encryption. But information security programs need to be thoughtfully designed so they don't undermine the lawful tools we need to keep this country safe," he said.

Wray also highlighted improvements made to the agency's cybersecurity operations. The FBI now assigns work based on an agent's cybersecurity experience rather than jurisdiction; Cyber Action Teams have been formed for quick deployment; every field office has a Cyber Task Force; and indictments and US Treasury Department sanctions will be sought even if a defendant can't be apprehended.

Read more about Wray's comments here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
What We Talk About When We Talk About Risk
Jack Jones, Chairman, FAIR Institute,  7/11/2018
Ticketmaster Breach Part of Massive Payment Card Hacking Campaign
Jai Vijayan, Freelance writer,  7/10/2018
Major International Airport System Access Sold for $10 on Dark Web
Kelly Sheridan, Staff Editor, Dark Reading,  7/11/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Cyberspace is much less secure than my old lamp.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-6681
PUBLISHED: 2018-07-17
Abuse of Functionality vulnerability in the web interface in McAfee Network Security Management (NSM) 9.1.7.11 and earlier allows authenticated users to allow arbitrary HTML code to be reflected in the response web page via appliance web interface.
CVE-2018-13864
PUBLISHED: 2018-07-17
A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted HTTP requests.
CVE-2018-14338
PUBLISHED: 2018-07-17
samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.
CVE-2018-14337
PUBLISHED: 2018-07-17
The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory access because the mrb_str_resize function in string.c does not check for a negative length.
CVE-2018-14329
PUBLISHED: 2018-07-17
In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.