Transforming and securing the @DeptofWar digital ecosystem is an active, ongoing mission that requires continuous innovation. Today, @DoWCIODavies officially opened nominations for the 26th Annual CIO Awards to spotlight those who drive cybersecurity and empower our warfighters with data supremacy and decision dominance on the battlefields of today and tomorrow.
Leaders are encouraged to nominate champion performers by October 30, 2026, 12:00 pm EST. Nominate here: dowcio.war.gov/About/Awards/
Read more at: dowcio.war.gov/In-the-News/A…
"It's just charging my phone." That single plug can compromise an entire @DeptofWar mission network. Threat actors weaponize everyday accessories via firmware exploits and payloads the second they touch a port.
Keep your Government Furnished Equipment (GFE) locked down:
- Never charge personal phones, watches, or devices via GFE USB ports.
- Zero personal flash media or thumb drives—ever.
- No unapproved personal Bluetooth or wireless accessories.
- If it requires a driver download, it doesn't plug in.
Cyber defense starts at the port. Be Brilliant at the Basics!
LTG Paul Stanton, @DoW_DISA Director and DCDC Commander, highlights a critical threat we all face every day Social Engineering. SI is making these attacks more sophisticated and harder to spot. Verify before you share and Be Brilliant at the Basics.
Our Director, @USArmy Gen. Paul T. Stanton explains how to spot social engineering and protect your data. Building this awareness is key to being #BrilliantAtTheBasics.
For this week’s @DoW_CIO #CyberSecurityAwarenessMonth campaign we're urging you to stay vigilant & be secure.
Clear calendars, casual clothes, and incredible conversations.
Last Friday, the @DeptofWar CIO Enterprise Technology Excellence (ETE) team gathered for an All-Hands focused entirely on connection, introducing new teammates, sharing unknown facts about one another, and collecting honest ideas on how we can make our everyday work experience even better.
Proud to work alongside such an amazing, dedicated group!
Protecting @DeptofWar warfighters and ensuring they can accomplish the mission demands resilient and rehearsed operational technology (OT) incident response capabilities across the DIB. OT response is fundamentally different because these incidents directly impact physical infrastructure.
Prepare – Contain & Mitigate – Recover – Integrate Lessons
Brilliant at the Basics highlights two valuable resources to bolster partner readiness:
- @DC3Forensics's DIB Vulnerability Disclosure Program: For mitigating public-facing software vulnerabilities.
- @CISAgov ICS310 Training: For building OT threat-detection capabilities.
Links:
DIB-VDP: dc3.mil/Missions/Vulnerabili…
CISA ICS310: cisa.gov/resources-tools/tra…
Calling all USPACOM/DoW cyber personnel: Ready to help shape the future of cyber at the @DeptofWar? If you're in the USPACOM area, join DoW CIO Cyber Workforce leadership at the Hilton Hawaiian Village on Oct. 26 from 10:30 am – Noon. This is a great opportunity to connect directly with DoW CIO Cyber Workforce leadership, share your vision, and discover upcoming pathways for career growth and skill development in our community.
For more information, go to: events.afcea.org/TIP26/Publi…
Bring your ideas and energy—we can’t wait to connect!
In 2026, smartwatches, optical smart glasses, and fitness trackers have become second nature. They optimize our health, streamline notifications, and log our daily habits with incredible precision.
However, every sensor tracking your pulse or step count opens a digital door. This Cybersecurity Awareness Month, it’s time to take a closer look at the physical and cyber-attack surfaces strapped directly to our wrists and faces.
Be Brilliant at the Basics and make it a priority to secure your wearables.
@DoW_CIO retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth

ALT The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
If you’re a Defense Industrial Base partner looking for practical, no cost or low-cost cybersecurity resources, you don’t have to look far. In our latest Brilliant at the Basics Cybersecurity Awareness Month reel @DeptofWar CISO Aaron Bishop shares how our IT and OT Top 10 lists can help your organization strengthen resilience, manage cyber risk, and protect critical systems.
Watch the reel and explore the whole collection.
dowcio.war.gov/BrilliantBasi…
The portal for the 26th Annual CIO Awards closes October 30, 2026, at 12:00 PM EST. Across @DeptofWar teams are hardening networks, pushing mission software to the edge, and out-innovating adversaries in real time.
Component Commands, Services, Departments and Agencies, and inter-governmental defense partners – don’t miss this chance to ensure your highest-performing cyber and IT personnel receive the recognition they earned.
Details and submission portal: dowcio.war.gov/About-DoW-CIO…
Be Secure. Cybersecurity does not stop at the screen.
Physical security helps protect personnel, facilities, our technology ecosystem, and data from actions that can create serious risk. A misplaced badge, unlocked workstation, unattended device, or unsecured document can create an opening for unauthorized access.
You should always secure devices, badges, and sensitive materials before stepping away from your workstation or leaving a facility. Do not prop doors open or allow others to follow you into controlled spaces without using their own authorized credential.
Whether you are a warfighter, member of the @DeptofWar workforce, or Defense Industrial Base, strong physical security is a key part of being Brilliant at the Basics.
DoW CIO commends the collaborative effort of @NSACyber, @NIST, and @CISAgov in delivering practical guidance for managing the risks associated with super intelligence control incidents. We are in an unprecedented period of technological advancement, and these practices offer a strong opportunity to strengthen resilience, improve incident readiness, and better protect the systems that support national security.
We encourage all network defenders and those safeguarding National Security Systems across the @DeptofWar and Defense Industrial Base to read the report.
media.defense.gov/2026/Oct/1…
xitter.cf/NSACyber/status/211251…
NSA joined @NIST and @CISACyber in releasing guidelines for managing SI control incidents. Organizations utilizing SI are encouraged to adopt these practices. Read the joint report: media.defense.gov/2026/Oct/1…
A flat network is a vulnerable network. Logically separating business IT networks from critical operational technology (OT) systems helps limit lateral movement and contain a potential intrusion before it disrupts core operations.
Eligible small DIB businesses can also explore @NSACyber's Continuous Autonomous Penetration Testing (CAPT), an AI-powered capability that enables internal-network penetration testing at no cost and without prior expertise.
NSA’s CAPT is designed to help eligible small businesses assess internal networks and validate remediation.
Learn more at nsa.gov/About/Cybersecurity-…
This week’s @DeptofWar Brilliant at the Basics Cybersecurity Awareness Month campaign theme is Be Secure. In our latest reel, Deputy CIO for Operations Christine Condon shares a simple, yet important tip regarding government-furnished equipment.
Watch the whole reel to learn more.
Don't fall for Harry The Hamster's tricks. Social engineering is one of the most effective tools used by our adversaries. AI has increased the sophistication of the attacks and the data available to the attackers. Every member of the @DeptofWar team must be constantly vigilant to counter these tactics.
Indicators of a social engineering attempt include:
•Unsolicited requests for personal or financial information.
•A sense of urgency or pressure to act quickly.
•Suspicious email addresses or unusual grammar.
•Promises that seem too good to be true.
Verify before you trust to be Brilliant at the Basics!
Congratulations to Farah Pathan, the DoW CIO’s program analysis and IT asset management lead, on receiving the Leading for IMPACT Women in Leadership Award!
The award recognizes women whose leadership, mentorship, and mission focus make a meaningful difference across the federal community.
Farah’s recognition reflects the expertise and commitment she brings to the @DeptofWar CIO team every day. We’re proud to have her on our team.
Insider threats are among our most complex and hard to recognize risks because they are deliberately designed to avoid detection. During Cybersecurity Awareness Month, and every month, all @DeptofWar personnel and industry partners must be vigilant every day.
Spotting the subtle indicators of recruitment or network exploitation protects our Information and Operational Technology. Know the signs: changes in behavior, unexplained affluence, accessing information not needed for their job, and more.
If you See Something, Say Something. Be Brilliant at the Basics!
Today, Honorable Kirsten Davies also welcomes Mr. Kenneth Nienhuser to his new role as the Deputy Chief of Staff. He assumes this position after serving as the lead for the office’s industry outreach, coordinating executive-level engagement processes, strategic communications, and decision-support materials. A Marine Corps veteran, Mr. Nienhuser brings a wealth of experience supporting senior @DeptofWar leaders to the position.
@DoW_CIO retweeted
Today, I am signing The Vice President’s Pledge to Protect Americans from Fraud to reaffirm a shared commitment to protect Americans from fraud.
Cyber fraud threatens individuals, families, and organizations alike. The @DeptofWar OCIO remains focused on strengthening cybersecurity to protect the ecosystem that powers our warfighters.
During Cybersecurity Awareness Month, the @DoW_CIO’s Brilliant at the Basics campaign reinforces practical habits that can reduce fraud risk—from protecting credentials and verifying requests to recognizing suspicious messages.
I encourage everyone to stay vigilant and apply these simple safeguards to help protect personal information, the Department, and the mission.





















