<story><title>CISA broke into a US federal agency, and no one noticed for a full 5 months</title><url>https://www.theregister.com/2024/07/12/cisa_broke_into_fed_agency/</url></story><parent_chain><item><author>jmclnx</author><text>Nice they are doing their job and glad they exist.&lt;p&gt;But how to fix ?  Most US Gov agencies are underfunded, it is either beef up security or provide services.  Really a tough choice, and the outlook looks like they may lose even more funding.</text></item></parent_chain><comment><author>Rinzler89</author><text>&lt;i&gt;&amp;gt;Most US Gov agencies are underfunded&lt;/i&gt;&lt;p&gt;Doesn&amp;#x27;t the US outspend in terms of dollars almost every single developed country on the planet at absolutely everything, even in per capita statistics, from military, police to education and healthcare? How could it be underfunded?</text></comment>
<story><title>CISA broke into a US federal agency, and no one noticed for a full 5 months</title><url>https://www.theregister.com/2024/07/12/cisa_broke_into_fed_agency/</url></story><parent_chain><item><author>jmclnx</author><text>Nice they are doing their job and glad they exist.&lt;p&gt;But how to fix ?  Most US Gov agencies are underfunded, it is either beef up security or provide services.  Really a tough choice, and the outlook looks like they may lose even more funding.</text></item></parent_chain><comment><author>akira2501</author><text>Lesson learned: The assessed organization had insufficient controls to prevent and detect malicious activity.&lt;p&gt;Lesson learned: The organization did not effectively or efficiently collect, retain, and analyze logs.&lt;p&gt;Lesson learned: Bureaucratic processes and decentralized teams hindered the organization’s network defenders.&lt;p&gt;Lesson learned: A “known-bad” detection approach hampered detection of alternate TTPs.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.cisa.gov&amp;#x2F;news-events&amp;#x2F;cybersecurity-advisories&amp;#x2F;aa24-193a&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.cisa.gov&amp;#x2F;news-events&amp;#x2F;cybersecurity-advisories&amp;#x2F;aa...&lt;/a&gt;</text></comment>