David DiMolfetta

David DiMolfetta

@ddimolfetta.bsky.social

Nextgov/FCW cybersecurity + intelligence reporter. Tips: ddimolfetta@govexec.com Signal: @ djd.99 X/Twitter: @ddimolfetta

2.8K followers398 following945 posts

Pinned

David DiMolfetta
@ddimolfetta.bsky.social

Honored to be recognized at The Echo Awards yesterday as the 2026 Best Investigative Journalist, alongside my colleague Ross Wilkers, recognized for his great work covering government contracting.

David DiMolfetta
@ddimolfetta.bsky.social

It would require major developers to submit quarterly reports to a new Commerce Department office and disclose significant research changes within four business days to help Washington track AI advances and safety testing.

David DiMolfetta
@ddimolfetta.bsky.social

What a busy week for cyber and intelligence news. Kudos to all the reporters who have been covering and helping everyone make sense of it all. So grateful for all I learn from my peers on this beat.

David DiMolfetta
@ddimolfetta.bsky.social

New: The senior CISA official whose office helps oversee a key global system for tracking software vulnerabilities is leaving government service this week after nearly six years at the agency. A major departure as AI changes the vulnerability landscape. www.nextgov.com/cybersecurit...

nextgov.comCISA vulnerability response chief departing agency after nearly six yearsLindsey Cerkovnik helped oversee agency efforts to track software flaws. She plans to start a new role in November.
David DiMolfetta
@ddimolfetta.bsky.social

Hackers have made millions of attempts to exploit newly disclosed flaws in PHP as government agencies and businesses around the world work to install emergency fixes, cyber intelligence firms say. www.nextgov.com/cybersecurit...

nextgov.comPHP flaws draw millions of hacking attempts amid global push for fixesCloudflare reported millions of attempts to exploit the widely used web software, while researchers warned that compromised sites could also put visitors at risk.
David DiMolfetta
@ddimolfetta.bsky.social

On Wednesday, ODNI held a briefing with state and local officials to discuss election threats. The conversation and the offering of services “didn’t always appreciate the reality of being 13 days from the midterm election,” one person who attended the call told us.

David DiMolfetta
@ddimolfetta.bsky.social

Himes also said he and Warner are preparing for scenarios in which Trump cites intelligence to justify seizing ballot boxes or disputing results. They’ve told DNI Clayton, CIA Director Ratcliffe and career intelligence staff to be reachable so they can quickly check evidence.

David DiMolfetta
@ddimolfetta.bsky.social

One U.S. federal agency is scrambling to implement PHP fixes, an official in that agency tells me. They have "quite a few" instances of PHP running on their systems, and they are expecting to implement patches in the coming hours. Our full coverage below: www.nextgov.com/cybersecurit...

nextgov.comUS agencies urge fixes for programming language flaws putting millions of web systems at riskThe flaws in the widely used website software known as PHP could expose data and let hackers seize control.
David DiMolfetta
@ddimolfetta.bsky.social

NEW: State Dept. has instructed all personnel to replace “artificial intelligence” with “Super Intelligence” in communications and rename AI-related programs and systems, per two people familiar and contents of a Monday cable obtained by me + @jheckman.bsky.social www.nextgov.com/artificial-i...

nextgov.comState Department orders ‘super intelligence’ wording across all official communicationsAn internal cable from the agency extends Trump’s terminology change to emails, speeches, websites and official titles, while preserving legal language and historical records.
David DiMolfetta
@ddimolfetta.bsky.social

Their appeal comes amid what several stakeholders see as weakening cooperation between federal agencies, technology companies and outside researchers tracking foreign influence operations, as we reported last week: www.nextgov.com/cybersecurit...

nextgov.comOfficials see gaps in election communications as AI makes foreign influence easierSources describe weakening cooperation between the federal government and state and industry partners ahead of the midterms, as AI gives foreign operatives cheaper ways to produce and spread deceptive...
David DiMolfetta
@ddimolfetta.bsky.social

Wyden’s office identified 350 federal web addresses that lack the Encrypted Client Hello standard. They include sites that facilitate intelligence community job applications, immigration services, health information and U.S. diplomatic websites around the world.

David DiMolfetta
@ddimolfetta.bsky.social

Scoop: The US has begun the process of selecting leaders for its private-sector offensive cyber program, sources say. But questions remain about how companies will be paid and who bears responsibility if operations go wrong. www.nextgov.com/cybersecurit...

nextgov.comUS moves to staff leaders for industry-partnered offensive cyber programThe Trump administration is laying groundwork to enlist companies against foreign cybercriminals, but payment arrangements and protections for participating firms remain unresolved.
David DiMolfetta
@ddimolfetta.bsky.social

Officials crafting framework are exploring whether firms could be paid based on success of their operations, but the process is complicated, a former official said. For example, stolen crypto seized in an operation may need to be returned to victims, not participating companies.

David DiMolfetta
@ddimolfetta.bsky.social

Identifying eligible targets also continues to present challenges. We previously reported concerns re. program's use against Russian cybercriminals that often work with or are tolerated by the Kremlin. Under the program, nation-state groups are not valid. www.nextgov.com/cybersecurit...

nextgov.comThe Russian hurdle in Trump’s new offensive cyber programThe White House wants private companies to help take down cybercriminals overseas. But in Russia, the line between criminal hackers and the government is difficult to draw.
David DiMolfetta
@ddimolfetta.bsky.social

NEW: Federal retreats from programs that track foreign influence operations has weakened cross-sector relationships used to identify + confront those campaigns as midterm elections fast approach, even as AI makes those operations easier to deploy www.nextgov.com/cybersecurit...

nextgov.comOfficials see gaps in election communications as AI makes foreign influence easierSources describe weakening cooperation between the federal government and state and industry partners ahead of the midterms, as AI gives foreign operatives cheaper ways to produce and spread deceptive...
David DiMolfetta
@ddimolfetta.bsky.social

Story is based on interviews with current and former federal officials, state election officials and specialists in cybersecurity and influence operations. Several people spoke on the condition of anonymity to be candid about their views and for fear of retribution.

David DiMolfetta
@ddimolfetta.bsky.social

Scoop: Forthcoming GAO audit of a key DHS information-sharing network will examine three known security incidents, including an intrusion by outside hackers that Nextgov/FCW first reported this summer, according to two sources. www.nextgov.com/cybersecurit...

nextgov.comWatchdog to examine summertime hack of DHS information network, other incidentsThe Government Accountability Office is expected to flag that DHS delayed in notifying Congress of the incidents, according to a person familiar with the review.
David DiMolfetta
@ddimolfetta.bsky.social

The DMDC breach that exposed sensitive personnel information for months raises questions yet again about how federal agencies are able to successfully detect unauthorized access to the records they hold on millions of individuals: www.nextgov.com/cybersecurit...

nextgov.comPentagon personnel breach — undetected for months — renews cyber standard scrutinyUnauthorized users accessed sensitive records for roughly nine months before discovery, exposing another government personnel data fiasco as the FBI confronts its own breach incident.
David DiMolfetta
@ddimolfetta.bsky.social

Among those impersonated was Lynne Parker, who served in White House’s OSTP. She confirmed she learned of the impersonation in July. “It is personally troubling to see the trust and relationships I’ve built over my career exploited to deceive others,” she told me.

David DiMolfetta
@ddimolfetta.bsky.social

The intelligence threat highlights the high stakes of the global AI race, and the findings come just days after top executives like Anthropic’s Dario Amodei meet with Donald Trump to discuss voluntary AI safety commitments.

David DiMolfetta
@ddimolfetta.bsky.social

Election officials said Wednesday that renewed federal cybersecurity assistance comes too late for some of their midterm preparations, following cuts they say disrupted support from CISA, though they are not closing the door on federal help.  www.nextgov.com/cybersecurit...

nextgov.comRenewed CISA support comes too late for midterm prep, some election officials sayArizona still plans to accept federal help on Election Day, while officials warn that staffing cuts have weakened relationships and left smaller jurisdictions with fewer resources.

David DiMolfetta reposted

The New York Times
@nytimes.com

A passenger jet flying from Dubai to Tel Aviv signaled it was in distress on Wednesday and abruptly reversed course near the Saudi-Jordanian border. Officials of three Israeli government agencies said it appeared that the pilot and co-pilot of the FlyDubai flight had gotten into a scuffle.

nyti.msFlyDubai Flight to Tel Aviv Issues Distress Signal Before Landing in Saudi ArabiaThe plane was traveling from Dubai to Israel when the pilot and co-pilot appear to have gotten into a fight, Israeli officials said.
David DiMolfetta
@ddimolfetta.bsky.social

Six federal agencies failed to provide records needed to determine whether DOGE personnel appropriately accessed and protected government systems, leaving Congress and the public without assurances that sensitive information was secured, GAO said Tuesday. www.nextgov.com/policy/2026/...

nextgov.comAgencies withheld records needed to verify DOGE data safeguards, GAO saysA review of six agencies could not establish the full extent of DOGE’s system access or whether security rules were followed. Two agencies challenged the watchdog’s authority to investigate.
David DiMolfetta
@ddimolfetta.bsky.social

The FBI’s top cyber official urged remaining ShinyHunters members to come forward while still possible, hinting at possible progress against the hacking group accused of stealing troves of sensitive bureau personnel records: www.nextgov.com/cybersecurit...

nextgov.comFBI warns ShinyHunters members to come forward after alleged leader’s arrest“You know how to find us, and we know how to find you,” said Brett Leatherman, assistant director of the FBI’s Cyber Division. “I suggest you reach out first while the choice is still yours.”
David DiMolfetta
@ddimolfetta.bsky.social

In a lengthy email sent to me, ShinyHunters now claims it never intended to publish the FBI data it says it stole, calling the episode a “marketing campaign.” The group previously gave the FBI one week to change or remove an advisory about it. I’ve asked FBI for comment.

David DiMolfetta
@ddimolfetta.bsky.social

New: The House Intelligence Committee’s top Democrat warned that intelligence contractors may face scrutiny over donations to Trump’s White House ballroom project, including whether contributions were connected to contracts or access to senior officials. www.nextgov.com/acquisition/...

nextgov.comLawmaker warns intelligence contractors' Trump ballroom donations may be scrutinizedRep. Jim Himes, the ranking member of the House Intelligence Committee, wants to examine whether contributions were tied to federal contracts or access to administration officials.
David DiMolfetta
@ddimolfetta.bsky.social

New: AI security testing tools developed by Google-owned Wiz uncovered weaknesses that exposed a public rail operator’s administrative systems and gave outsiders a way to control a public hospital’s mobile alert channel, the company said Thursday. www.nextgov.com/cybersecurit...

nextgov.comAI scanning tools found security gaps at rail operator and hospitals, Wiz saysResearchers discovered access to rail administration systems, a hospital alert channel and sensitive records in a new effort aimed at organizations with limited cyber resources.
David DiMolfetta
@ddimolfetta.bsky.social

The findings are among the early results of the firm’s new initiative aimed at entities with low cyberdefense resources. The cases continue to show how AI tools can help rapidly identify entry points for hackers if they’re not caught in time.

David DiMolfetta
@ddimolfetta.bsky.social

Other discoveries involved sensitive government records, where a municipal data service exposed personal information from about ~5k elderly residents. In another case, an exposed admin key also permitted reading, 8.8 million files in a MidEast country’s national archive.

David DiMolfetta
@ddimolfetta.bsky.social

Data stolen in hacking group’s alleged intrusion into FBI is believed to contain personal info on hundreds of intel analysts and others involved in clandestine activities, according to two people familiar with the matter. Matching Reuters + 404 Media -> www.nextgov.com/cybersecurit...

nextgov.comStolen FBI data reveals employees’ roles in intelligence and surveillanceExposed analysts work on areas including China, Russia and electronic surveillance. ShinyHunters claimed responsibility for the breach this week. The FBI said it’s investigating.
David DiMolfetta
@ddimolfetta.bsky.social

The analysts focus on myriad subject areas like Russia, China, Hezbollah and cartels. Multiple also work on HUMINT and telecom interception. Some are in the bureau’s Remote Operations Unit. One works in the FISA Management Unit, which handles the processing of FISA applications.

David DiMolfetta
@ddimolfetta.bsky.social

Update: ShinyHunters sent us a text file appearing to contain sensitive personal info on ~5k FBI employees, including names, addresses, phone numbers, and other info. We queried some of the listed peoples’ names online and found that they are employed with the FBI.

David DiMolfetta@ddimolfetta.bsky.social

The language ShinyHunters wants removed appears in a May 15 FBI public service announcement issued after an attack disrupted an online learning management system used by educational institutions. www.nextgov.com/cybersecurit...

nextgov.comShinyHunters claims FBI data theft, demands bureau retract cyber warningThe hacking group says it obtained sensitive employee and applicant records. The full scope of the claimed breach remains unclear.
David DiMolfetta
@ddimolfetta.bsky.social

The job postings in the data included employees designated as intelligence analysts, attorneys, student trainees and special agents, among other roles. The entire data set was not verified.