Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

7/24/2019
03:20 PM
50%
50%

NSA to Form New Cybersecurity Directorate

Anne Neuberger will lead the directorate, which aims to bring together the NSA's offensive and defensive operations.

The National Security Agency announced plans to form a cybersecurity directorate later this year as part of a larger initiative to fuse its offensive and defensive operations, a years-long ongoing integration that has broadened under the leadership of General Paul Nakasone.

As the NSA has undergone reorganizations in recent years, it has lost its emphasis on cybersecurity, said Gen. Nakasone during the International Conference on Cyber Security at Fordham University, the Wall Street Journal reports. The new directorate is intended to once again make security a priority by combining it with the NSA's foreign intelligence projects and increasing its focus on both national security networks and the defense industrial base.

Anne Neuberger has been appointed head of the new directorate, which will reportedly leverage more signals intelligence from operations against US adversaries. Its goal is to strengthen national security by sharing intel with other federal agencies and private companies. The directorate will take the place of the NSA's current information assurance directorate.

Neuberger, who currently sits on the NSA board of directors, was its first chief risk officer and part of the team that helped build Cyber Command. In the past year she has overseen the NSA's election security efforts leading up to, and during, the 2018 midterms, which the WSJ says saw more aggressive efforts from the NSA and the US Cyber Command to defend against Russian interference and share more information with agencies including the FBI and DHS.

In her new role, Neuberger will report to Gen. Nakasone. Read more details here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
tdsan
50%
50%
tdsan,
User Rank: Ninja
7/24/2019 | 8:28:32 PM
They already have another group called TAO

TAO is reportedly "now the largest and arguably the most important component of the NSA's huge Signals Intelligence Directorate (SID)[8] (SIGINT), consisting of more than 1,000 military and civilian computer hackers, intelligence analysts, targeting specialists, computer hardware and software designers, and electrical engineers" - Wikipedia

As the NSA has undergone reorganizations in recent years, it has lost its emphasis on cybersecurity, said Gen. Nakasone during the International Conference on Cyber Security at Fordham University, the Wall Street Journal reports. - Dark Reading

Wait, I am confused, NSA already has a group called TAO that is directly responsible for Stuxnet and Nitro Zeus creation. That group is an offensive and defensive group where they utilize the various tools (some that have been stolen by Shadow Brokers) that are a combination of exploits and vulnerabilities found in OS, Network, Protocols, and other signal communication tools.

There is also a group called "Cyber Command" that is specifically responsible for offensive tactics.
"USCYBERCOM was created in mid-2009 at the National Security Agency (NSA) headquarters in Fort George G. MeadeMaryland. It cooperates with NSA networks and has been concurrently headed by the Director of the National Security Agency since its inception.[1] While originally created with a defensive mission in mind, it has increasingly been viewed as an offensive force.[1] On 18 August 2017, it was announced that USCYBERCOM would be elevated to the status of a full and independent unified combatant command.[2] This elevation occurred on 4 May 2018." - Wikipedia

USCybercom is an offensive entity that is responsible for cybersecurity operations under the direction of the NSA. I am trying to figure out if they have two groups that are responsible for offensive and defensive cybersecurity tactics, why did Nakasone say that they did not have groups to address the cybersecurity issues at Ft. Belvoir and Ft. Meade? 

I think it is because they want to increase the fiscal portfolio, if they can create another directorate, this will give them the ability to expand and sustain the cybersecurity budget. But this happens all the time, the misuse of money and power to feed their own personal power obsession.

Todd  
44% of Security Threats Start in the Cloud
Kelly Sheridan, Staff Editor, Dark Reading,  2/19/2020
Zero-Factor Authentication: Owning Our Data
Nick Selby, Chief Security Officer at Paxos Trust Company,  2/19/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-9405
PUBLISHED: 2020-02-26
IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.
CVE-2020-9406
PUBLISHED: 2020-02-26
IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.
CVE-2020-9407
PUBLISHED: 2020-02-26
IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.
CVE-2020-9398
PUBLISHED: 2020-02-25
ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.
CVE-2015-5201
PUBLISHED: 2020-02-25
VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows r...