News for hackers. Stuff that matters.

A comment on Why CISA Issued Our First Emergency Directive.

Re:Why CISA Issued Our First Emergency Directive by ccnafr on Saturday February 16, 2019 @06:38PM (#19181657)
tl, dr: Because Iranian hackers were hijacking DNS records for government sites.
[ Parent | on HN ]
Re:Why CISA Issued Our First Emergency Directive by ciupicri on Saturday February 16, 2019 @06:55PM (#19181726)
Where is Iran mentioned?
[ Parent | on HN ]
Re:Why CISA Issued Our First Emergency Directive by eganist on Saturday February 16, 2019 @07:06PM (#19181769)
It's buried in links, but the FireEye research referenced by US CERT discusses it.

https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS...

And

https://www.fireeye.com/blog/threat-research/2019/01/global-...

---

Link chain that I followed:

1) op — https://cyber.dhs.gov/blog/#why-cisa-issued-our-first-emerge...

2) first link in op, "emergency directive" — https://cyber.dhs.gov/ed/19-01

3) footnote #1 in the emergency directive — https://www.us-cert.gov/ncas/current-activity/2019/01/10/DNS...

4) FireEye research referenced on the US CERT page — https://www.fireeye.com/blog/threat-research/2019/01/global-...

[ Parent | on HN ]