The CISA and FBI announced that a federal agency, which they are keeping anonymous for now, was hacked by the Iranian government.
At the beginning of December last year, the Cybersecurity and Infrastructure Security Agency (CISA), which formed in 2018 as a sub-agency of the Department of Homeland Security (DHS), identified a serious software error being used across federal agency networks. The CISA issued an urgent notice about the potential security risk and instructed all agencies to fix the computer bug by December 23rd of last year and also to report the completion of this fix, or “patch,” to the CISA five days later.
Although the affected agency was not identified by the CISA or FBI, which are working in tandem on this cybersecurity incident, the agencies released a notice last week that at least one federal agency failed to repair the software flaw mentioned above. In April of 2022, the CISA became aware that this agency had been hacked by persons linked to the Iranian government. These hackers successfully infiltrated the agency’s network after the software fix was supposed to be completed – sometime between February and March of 2022. Then, later in the summer, “suspected threat activity” was observed by the CISA.
The bad actors had compromised user credentials, installed cryptocurrency mining software, and even created a rogue administration account. The only information given about what agency had been digitally attacked was that it was an “unnamed federal civilian executive branch organization.” Also in last week’s announcement from the CISA and FBI, it was explained that if other agencies had failed to complete the software fix back in December, they should consider their systems compromised already. The software flaw that exploited by Iran is known as an “unpatched Log4Shell vulnerability.”
—–
Until Next Time,
The FedLife Podcast is your in-depth, biweekly deep dive into the world of federal benefits and retirement planning. Hosted by federal benefits expert Ed Zurndorfer and Dan Sipe of Serving Those Who Serve, each 30-minute episode unpacks the complexities of FERS and CSRS retirement, FEHB and Medicare, survivor benefits, tax planning, and more. Designed for federal employees and retirees who want more than just the basics, FedLife goes beyond the headlines to explore the rules, nuances, and strategies that can make a meaningful difference in your retirement. Remember: it’s your Fed life, make it a great one.
The Fed15 Podcast is your weekly 15(ish)-minute briefing on federal benefits and financial planning, built specifically for federal employees and retirees. Hosted by Dan Sipe and Katelyn Murray of Serving Those Who Serve, each episode delivers clear, actionable guidance on topics like FERS and CSRS retirement, TSP strategies, FEHB, survivor benefits, tax planning, and more! Whether you’re five years from retirement or already there, The Fed15 helps you cut through the noise, avoid costly mistakes, and make confident decisions about your federal benefits.
