Tags: Cyber Security | NSA/Surveillance | Trump Administration | national security agency | pentagon | internet | army

Classified Info on Pentagon/NSA Program Leaked Online

Image: Classified Info on Pentagon/NSA Program Leaked Online
(Sascha Steinach/AP)

By    |   Tuesday, 28 November 2017 03:27 PM

"Critical data" on a joint program between the U.S. Army and the National Security Agency was available online without a password, cybersecurity company Upguard reports.

Upguard Director of Cyber Risk Research Chris Vickery found the data on an exposed Amazon Web Services cloud storage bucket, which they did not need a password to access, only a URL. In total, 47 files and folders were viewable within the repository, three of which contained classified information and could be downloaded, containing data from U.S. Army Intelligence and Security Command, a military intelligence unit run jointly by the NSA and the Army.

"Among the most compelling downloadable assets revealed from within the exposed bucket is a virtual hard drive used for communications within secure federal IT environments, which, when opened, reveals classified data labeled NOFORN – a restriction indicating a high level of sensitivity, prohibited from being disseminated even to foreign allies," Upguard's Dan O'Sullivan wrote in the report.

"The exposed data also reveals sensitive details concerning the Defense Department's battlefield intelligence platform," and "the Distributed Common Ground System" or DCGS-A, which was an attempt by the intelligence community to build a wide-ranging intelligence network.

"If, then, such a high level of sensitivity is inherent to the data, how could it be exposed?" O'Sullivan asks. "Regrettably, this cloud leak was entirely avoidable, the likely result of process errors within an IT environment that lacked the procedures needed to ensure something as impactful as a data repository containing classified information not be left publicly accessible."

He ends with a warning: "If the right hand does not know what the left hand is doing, the entire body will be injured. The Defense Department must have full oversight into how their data is handled by external partners, and be able to react quickly should disaster strike."

© 2018 Newsmax. All rights reserved.

   
1Like our page
2Share
Newsfront
Cybersecurity company Upguard reports "critical data" on a joint program between the U.S. Army and the National Security Agency was available online without a password.
national security agency, pentagon, internet, army
300
2017-27-28
Tuesday, 28 November 2017 03:27 PM
Newsmax Inc.
 

Newsmax, Moneynews, Newsmax Health, and Independent. American. are registered trademarks of Newsmax Media, Inc. Newsmax TV, and Newsmax World are trademarks of Newsmax Media, Inc.

NEWSMAX.COM
America's News Page
© Newsmax Media, Inc.
All Rights Reserved