Author Archive

David DiMolfetta

Cybersecurity Reporter, Nextgov/FCW

David DiMolfetta
David DiMolfetta covers cybersecurity for Nextgov/FCW. Previously, he researched The Cybersecurity 202 and The Technology 202 newsletters at The Washington Post and covered AI, cybersecurity and technology policy for S&P Global Market Intelligence. He holds a BBA from The George Washington University and an MS from Georgetown University. Get in touch with him on X/Twitter: @ddimolfetta . If you have a tip you'd like to share, David can be securely contacted at djd.99 on Signal.
Exclusive Companies

Trump admin floats policy language limiting contractor say on agency uses of technology

Ongoing drafts of policy documents feature language that would limit the private sector’s ability to dictate how their artificial intelligence models are used in government missions, according to sources familiar with their development.

Companies

White House accuses China of ‘deliberate, industrial-scale campaigns’ to steal US AI models

The White House Office of Science and Technology Policy told federal agencies that the Trump administration will be enhancing its engagement with the private sector to counter foreign-led distillation campaigns designed to undermine U.S. AI advances.

Companies

Autonomous weapons will be ‘key and essential part’ of warfare, Joint Chiefs chair says

Chairman Dan Caine also said the U.S. needs to become a “better” buyer of advanced tools and tech for defense activities.

Companies

US push to counter hackers draws industry deeper into offensive cyber debate

The White House is expanding the market for offensive cyber capabilities — and drawing more of the private sector into that ecosystem — even as policy boundaries around their use remain unclear.

Contracts

Trump’s FY27 budget proposes boosts and cuts to tech operations

Agencies like CISA, NIST and the IRS would see notable reductions in their budgets for next year, while programs at Energy and the VA would get additional financial support.

Contracts

Old-school spycraft could make a comeback as AI undermines trust

An article in the CIA’s Studies in Intelligence journal argues that artificial intelligence may erode confidence in certain electronic communications and further revive centuries-old human intelligence techniques.

Companies

Google launches threat disruption unit, stops short of calling it ‘offensive’

The unit will use legal authorizations and technical capabilities to impede cyber threat groups, though company execs say it will not go so far as to hack into adversaries' systems.

Contracts

CIA announces new acquisition framework to speed tech adoption

DARPA alum Efstathia Fragogiannis joined the agency as its new procurement chief in November and will be spearheading the effort, according to a CIA official.

Contracts

CISA orders agencies to patch and replace end-of-life devices, citing active exploitation

The directive gives agencies three months to identify unsupported edge devices, a year to begin removing them and 18 months to eliminate them entirely.

Contracts

White House cyber shop is crafting AI security policy framework, top official says

ONCD chief Sean Cairncross also said a bedrock National Cyber Strategy, initially expected last month, is coming “sooner rather than later” without specifying a date.

Companies

OMB reverses Biden-era software attestation order

A new executive branch memorandum instead allows agencies to lean on software bills of materials, or SBOMs, in lieu of a universal attestation framework.

Companies

US charges former Accenture employee with misleading feds on cloud platform’s security

Danielle Hillmer, most recently employed with SentinelOne, allegedly concealed a cloud product’s noncompliance with federal security regulations.

Companies

SEC to drop high-profile SolarWinds hack lawsuit

The landmark lawsuit garnered pushback from dozens of cybersecurity leaders last year.

Companies

Upcoming White House cyber strategy to seek more involvement with private sector

The Trump 2.0 cyber strategy is in development, National Cyber Director Sean Cairncross said, though he did not elaborate on when it would be released.

Companies

Industry groups push to keep open-source measures in annual intelligence bill

They’re backing provisions in the House version of the Intelligence Authorization Act. But multiple intelligence community elements are hesitant about the measures, people familiar say.

Contracts

FCC initiates process to ban Hong Kong Telecom in US

The agency has previously barred China-linked communications providers from operating on American soil.

Companies

CISA orders government to patch F5 products after ‘nation-state’ cyber intrusion

“This cyber threat actor presents an imminent threat to federal networks using F5 devices and software,” CISA’s directive says. China-linked hackers previously exploited F5 vulnerabilities.

Companies

Small defense industrial base firms pose tempting targets for nation-state hackers, NSA official says

Some 80% of the defense industrial base are actually small firms, according to the NSA’s head of DIB security, who has helped over 200 providers identify thousands of vulnerabilities in their systems.

Updated Companies

‘High-severity’ Microsoft Exchange vulnerability disclosed on heels of Black Hat talk

Parts of the federal enterprise are likely susceptible to the flaw that allows hackers to hijack on-premises versions of Active Directory. CISA plans to release an emergency directive on Thursday, according to a person familiar with the matter.

Contracts

House NDAA draft mandates database of contractors used in covert operations

The early stage defense bill draft would create an internal list of contractor clients that assist the U.S. military in its secret operations “to facilitate deconfliction and risk assessment.”