Ready to get compliant?

Show Me How
Talk To Us

Mondays With Miranda: August 20, 2018

Happy Monday, Everyone! I’ve got lots of interesting news today regarding the DoD, but first, I want to talk about a few upcoming events. Tomorrow, in Santa Clara, CA, SecureWorld Bay Area will be happening. This a great networking opportunity, as well a chance to listen to speakers discuss many important topics like cyber risk management and compliance in digital healthcare. Also, next Monday, August 27th, the Air Force Information Technology & Cyberpower Conference will begin in Montgomery, AL. This event offers three days of speakers, education & training opportunities, and an exhibitor driven trade show.

“Hack the Marine Corps”

The Department of Defense, along with HackerOne, just announced a new bug bounty program called “Hack the Marine Corps.” The first announcement was made at DEFCON in Vegas last week. The DoD actually chose more than 100 ethical hackers at the conference to search the Marine Corps public-facing websites and services for vulnerabilities. The ethical hackers found over 75 vulnerabilities, which resulted in them being awarded $80,000 altogether. The program, “Hack the Marine Corps,” will run on HackerOne’s platform on August 26th.

DoD News

The United States Government Accountability Office recently published an article stating, “the Department of Defense needs to improve its approach for collecting, reporting, and analyzing aviation mishap data.” An aviation mishap is an “unplanned event that results in damage to DoD property, illness or injury of DoD military or civilian personnel, damage to public property, or injury or illness to non-DoD personnel caused by DoD activities.” Apparently, GAO found a few gaps in the DoD’s approach which include:

  • Military service safety centers failing to collect standardized aviation mishap data.
  • No agreement between the safety centers and the Office of the Secretary of Defense (OSD) on OSD’s role for administering causal analysis of aviation mishaps.
  • The Department of Defense does not consistently collect relevant training data to analyze mishap trends.

That’s all I have for today! Thank you for tuning in to this week’s segment of “Mondays With Miranda!” Keep up to date with current news by following NeQter Labs on Twitter, Facebook, and LinkedIn. As always, if anyone has any questions, feel free to email [email protected]. Enjoy the rest of your week!

References

https://latesthackingnews.com/2018/08/16/bug-bounty-program-dubbed-hack-the-marine-corps-announced-by-dod/

https://www.gao.gov/products/GAO-18-586R

Related Posts

Talk To Us