Dr. Matt (@MattDCS) header
Dr. Matt (@MattDCS) profile picture

Dr. Matt

@MattDCS

Passionate Technologist. Cybersecurity. GDIT VP, Cyber. Tweets are my own & cyber related.

 DC/MD/VA Metro Area
gdit.com/cyber
Joined June 2009
  • Tweets1K
  • Following822
  • Followers362
31Media
Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)Photo by Dr. Matt (@MattDCS)
As cyber threats become more sophisticated, agencies must make the shift to a #zerotrustarchitecture to protect their systems, data, and users. Read more from our VP of Cyber, Dr. @MattDCS: gdit.com/perspectives/latest…
1
3
Great to hear @MattDCS and the @USArmy’s Colten O’Malley talk #cyber and #zerotrust strategies this afternoon at the @CyberScoopNews #ZeroTrustSummit!
Image from General Dynamics Information Technology (@GDIT)
2
6
thedrive.com/the-war-zone/43…
1
OMB opts for zero trust goals in lieu of impossible deadline fedscoop.com/omb-goals-zero-…

OMB opts for zero trust goals in lieu of impossible deadline

Chris DeRusha says FISMA reform goes hand-in-hand with the draft strategy document.

fedscoop.com
Twitch source code and creator payouts part of massive leak theverge.com/2021/10/6/22712…
Quantum Computing on a Chip: Brace for the Revolution tomshardware.com/news/quantu…

Quantum Computing on a Chip: Brace for the Revolution

The development is being compared to the desktop computing system revolution of the 1960's.

tomshardware.com
Microsoft has released #security updates for #vulnerabilities found in Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019.
NSA Cyber (@NSACyber) profile pictureNSA Cyber
@NSACyber13 Apr 2021
NSA urges applying critical Microsoft patches released today, as exploitation of these #vulnerabilities could allow persistent access and control of enterprise networks. msrc-blog.microsoft.com/2021…
48
2
67
DARPA takes step toward 'holy grail of encryption' livescience.com/darpa-holy-g…
DARPA takes step toward 'holy grail of encryption'

DARPA takes step toward 'holy grail of encryption'

livescience.com
Dr. Matt retweeted
NSA Cyber (@NSACyber) profile picture
NSA Cyber
@NSACyber2 Mar 2021
Multiple zero-day exploits of Microsoft Exchange Server require immediate action. Check for reported IOCs and apply critical patches here: microsoft.com/security/blog/…
HAFNIUM targeting Exchange Servers with 0-day exploits | Microsoft Security Blog

HAFNIUM targeting Exchange Servers with 0-day exploits | Microsoft Security Blog

Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, threat actors used this...

microsoft.com
9
268
44
397
Proofpoint sues Facebook to get permission to use lookalike domains for phishing tests zd.net/2Z8suMV via @ZDNet & @campuscodi
SolarWinds CEO Sudhakar Ramakrishna says evidence is emerging that hackers were lurking in the company’s Office 365 email system for months wsj.com/articles/hackers-lur… via @WSJ
WSJ News Exclusive | Hackers Lurked in SolarWinds Email System for at Least 9 Months, CEO Says

WSJ News Exclusive | Hackers Lurked in SolarWinds Email System for at Least 9 Months, CEO Says

SolarWinds CEO Sudhakar Ramakrishna says hackers accessed at least one of the company’s Office 365 accounts by December 2019, and then leapfrogged to other accounts used by the company.

wsj.com
1
1
10-year-old Sudo bug lets Linux users gain root-level access zd.net/3qVYhfW via @ZDNet & @campuscodi
TIC-mas is here: CISA issues network security guidance for remote work fedscoop.com/tic-guidance-re…
TIC-mas is here: CISA issues network security guidance for remote work

TIC-mas is here: CISA issues network security guidance for remote work

The draft Remote User Use Case is the latest addition to Trusted Internet Connections 3.0 core guidance, along with the Reference Architecture: Volume 2.

fedscoop.com
1
1
How the DOD is leading the charge on zero trust - FedScoop fedscoop.com/dod-leading-cha…
How the DOD is leading the charge on zero trust

How the DOD is leading the charge on zero trust

A look at the DOD's leading push to zero trust.

fedscoop.com
🔥 A new side-channel attack (CVE-2021-3011) could let hackers extract your secret 2-factor authentication #encryption keys from #Google Titan, or other FIDO-enabled hardware security keys, and clone them for unauthorized access. Read details — thehackernews.com/2021/01/ne… #infosec
New Attack Could Let Hackers Clone Your Google Titan 2FA Security Keys

New Attack Could Let Hackers Clone Your Google Titan 2FA Security Keys

A new side-channel attack could let hackers extract your private two-factor authentication encryption keys from Google Titan Security Keys and clone.

thehackernews.com
8
175
8
272
CISA updates SolarWinds guidance, tells US govt agencies to update right away zd.net/3o1cxmt via @ZDNet & @campuscodi
CISA updates SolarWinds guidance, tells US govt agencies to update right away - ZDNET

CISA updates SolarWinds guidance, tells US govt agencies to update right away - ZDNET

US federal agencies must update by the end of the year or take all SolarWinds Orion apps offline.

zdnet.com
Actors are forging SAML authentication to access protected data in the cloud. @msftsecresponse has observed similar techniques and additional TTPs. Visit their blog for more countermeasures: blogs.microsoft.com/on-the-i…
Important steps for customers to protect themselves from recent nation-state cyberattacks -...

Important steps for customers to protect themselves from recent nation-state cyberattacks -...

Today, Microsoft is sharing information and issuing guidance about increased activities from a sophisticated threat actor that is focused on high value targets such as government agencies and...

blogs.microsoft.com
17
109
25
237
us-cert.cisa.gov/ncas/curren…
.@CNMF_CyberAlert, @CISAgov and @FBI released the Kimsuky Cybersecurity Advisory, a summary of #DPRK malicious cyber acitivity posing as Google, Yahoo mail services, and South Korean reporters, targeting Japan, South Korea, and the United States. us-cert.cisa.gov/ncas/alerts…
Image from USCYBERCOM Cybersecurity Alert (@CNMF_CyberAlert)
1
129
15
211
TIC program in ‘final stage’ before releasing remaining 3.0 guidance fedscoop.com/tic-3-guidance-…
TIC program in 'final stage' before releasing remaining initial 3.0 guidance

TIC program in 'final stage' before releasing remaining initial 3.0 guidance

The Overlay Handbook and Traditional TIC and Branch Office use cases are coming, with a draft of the remote user use case expected by the end of 2020.

fedscoop.com
Load more