Zero days

Latest in Zero days

Cyber Command

Separating NSA and CYBERCOM? Be Careful When Reading the GAO Report

Robert Chesney Mon, Aug 7, 2017, 1:01 PM

The Government Accountability Office last week published a report that, among other things, weighs in on the pros and cons of the NSA/CYBERCOM “dual-hat” system (pursuant to which the director of the NSA/CSS and commander of CYBERCOM are the same person). The report deserves attention but also some criticism and context. Here’s a bit of all three.

1. What is the “dual-hat” issue?

Read more about Separating NSA and CYBERCOM? Be Careful When Reading the GAO Report

Encryption

India Debates Going Dark

Arun M. Sukumar Thu, Dec 17, 2015, 10:30 AM

The on-going debate on encryption and exceptional access for law enforcement agencies to encrypted communication—which recent attacks in Paris and California have only intensified—is also being closely studied in India. How India regulates encryption will be crucial for two reasons. First, India is among the fastest growing digital economies in the world, and its encryption policy could offer a template for other developing countries. What’s more, technology continues to flow from the West to the East but information is now firmly moving in the other direction.

Read more about India Debates Going Dark

Cybersecurity

Proposed U.S. Export Controls: Implications for Zero-Day Vulnerabilities and Exploits

Mailyn Fidler Wed, Jun 10, 2015, 9:00 AM

A year ago, U.S. policy on zero-day software flaws—vulnerabilities unknown to software vendors or users—made headlines. Now, zero-days are back in the news: on May 20, 2015, the U.S.

Read more about Proposed U.S. Export Controls: Implications for Zero-Day Vulnerabilities and Exploits