Eric Geller

Senior reporter at @CyberSecDive covering all things digital security. I also co-host @hothtakes. | Send me tips:

[Eric Geller @ericgeller]

The Trump administration says it's working with states to pilot-test critical infrastructure security projects. But at least 26 states and D.C. aren't involved, and many didn't know about it until I asked.

My new story, based on a nationwide survey: https://t.co/PcQWEAmc55

[Eric Geller @ericgeller]

If you couldn't make it to @IST_org and @ICS_Village's Critical Effect conference last month, now you can watch the journalist panel featuring @paulfroberts, @magmill95, @snlyngaas, @KimZetter, and me! https://t.co/oCMKA25x87

[Eric Geller @ericgeller]

A new report from GAO says the FAA and the TSA aren't doing everything they should be doing to protect the cybersecurity of the U.S.'s aviation system: https://t.co/QK8ruej3cz

[Eric Geller @ericgeller]

“Every day is another battle, but the war that we’re fighting is to maintain our democracy.” https://t.co/KCQGsg1pig

[Eric Geller @ericgeller]

Senior Trump administration cyber officials will kick off next month's Black Hat conference, per an announcement this morning. Keynote from NCD Sean Cairncross, then panel with CISA, FBI, and DOD. https://t.co/6v1xwtnyAF

[Eric Geller @ericgeller]

Here's my story about "Gold Eagle," the U.S. government's new vulnerability clearinghouse, which will coordinate the discovery (sometimes with AI models) and patching of vulnerabilities, especially in open-source projects. https://t.co/dNlPuOJ84u

[Eric Geller @ericgeller]

The White House says the new AI-powered vulnerability management clearinghouse established in Trump's EO has started operations. They're calling it "Gold Eagle." Press release says almost nothing about who's involved or what they're doing. https://t.co/U1jit5aEbQ

[Eric Geller @ericgeller]

"The department did not answer questions about why Rubio would decide to activate disappearing messages if his phone contained software that ensured those messages could not be fully deleted." https://t.co/OfLG5XjV8n

[Eric Geller @ericgeller]

Lawmakers like @RonWyden and @RepTedLieu have been warning about SS7 flaws for years (https://t.co/cSmV63q37s https://t.co/jGekTTZtCC https://t.co/YtQwP79Hdu), but this might be the highest-profile demonstration of those flaws yet.

[Eric Geller @ericgeller]

Remarkable story here: Iran seems to have used a well-known vulnerability in cell networks to track U.S. military forces during the war. https://t.co/wXaZOweXkH

[Eric Geller @ericgeller]

The Trump administration has suspended the second phase of a cybersecurity regulation program for defense contractors, saying it was costing those firms too much money to comply: https://t.co/EXMSKDSsLE

It's the latest hurdle in a long-running saga for these rules.

[Eric Geller @ericgeller]

Hugely embarrassing failure here, and great story by @ddimolfetta. https://t.co/fXFgIcqkTG

[Eric Geller @ericgeller]

The U.S. and a bunch of partners are reiterating warnings to critical infrastructure organizations about Russian government hackers exploiting vulnerabilities in edge devices like routers: https://t.co/1WWY8NCUXZ

[Eric Geller @ericgeller]

Verified Voting has a great website where you can see the voting equipment used in every jurisdiction in the U.S., as well as explanations of the different types of technology. https://t.co/ELulqALpq3

[Eric Geller @ericgeller]

DHS forcing states to implement "election integrity" measures to get federal election security $: https://t.co/sw7Ec5KccN

Req't to (promise to) drop barcode/QR-equipped ballots is big. Many states just bought a ton of those devices to replace all-electronic machines after 2016.

[Eric Geller @ericgeller]

Barcodes have been controversial with some election security activists for a long time, since the voter can't actually know what's encoded in them. But most security experts say they're fine as long as states maintain actual paper ballots in case of machine error, recount, etc.

[Eric Geller @ericgeller]

CISA has published a report about a contractor's recent leak of CISA security keys on GitHub. It's fairly candid about the agency's shortcomings and offers advice for other organizations.

https://t.co/v8PbIgx7a2

[Eric Geller @ericgeller]

CISA has published the charter for ANCHOR-CI. There's a few new details, including about how sector council establishment will work and how CISA will operate the program. https://t.co/qiZyVcmFxX

[Eric Geller @ericgeller]

New: More than a year after eliminating a key public-private critical infrastructure coordination framework, DHS is finally creating a replacement. The new system allows more types of councils but also emphasizes state and local responsibility. https://t.co/xZKVYT2sek

[Eric Geller @ericgeller]

Anthropic today unfroze access to its Mythos and Fable AI models after the government lifted its export-control ban. The company says the original jailbreak wasn't unique to its models but it's improved its safety classifier anyway. https://t.co/VPwSDtDsjl

[Eric Geller @ericgeller]

New: More than a year after eliminating a key public-private critical infrastructure coordination framework, DHS is finally creating a replacement. The new system allows more types of councils but also emphasizes state and local responsibility. https://t.co/xZKVYT2sek

[Eric Geller @ericgeller]

OMB has issued the post-quantum cryptography migration memo to agencies that Trump called for in his recent EO: https://t.co/IVOq3VM7uu