Larry Leibrock

AHS at Yale Presents: "General Timothy D. Haugh: What it Takes to Lead the NSA and U.S. Cyber Command" This past Monday, AHS at Yale hosted a conversation with General Timothy D. Haugh - former head of the National Security Agency and U.S. Cyber Command, and the first intelligence officer in U.S. history to be promoted to four-star general. The conversation was moderated by AHS Officer and event organizer Maile Zeng.

2

Today, OSMOSIS proudly salutes OSINT Foundation in celebrating National OSINT Day in the United States. Open-Source Intelligence professionals play a critical role across government, private sector, academia, journalism, and civil society. From strengthening investigations to supporting national security and protecting communities, OSINT practitioners demonstrate daily the power of lawful, ethical, and disciplined research. At OSMOSIS, we believe the future of our profession depends on integrity, standardization, collaboration, and continuous professional development. National OSINT Day is an opportunity to recognize the dedication of practitioners in the United States who elevate the field through responsible tradecraft and knowledge sharing. We commend OSINT Foundations for championing this important recognition and for their continued leadership in advancing awareness of open-source intelligence across the U.S. Intelligence Community. To every OSINT professional—thank you for your commitment to excellence and ethical practice. #nationalosintday #osintforgood #OSMOSIS #OSMOSISCon #OSINTCommunity

12

Welcoming Dr. Alana Gramm as our Women in Defense Tech Role Model! 🔘Your LinkedIn profile says “passionate about OSINT.” Could you tell us more about your background? Alana: I started in a counterterrorism unit and later in a cyber unit of the Berlin Criminal Investigation Department of the Berlin Police. Over the years, I helped establish and develop the field of Open Source Intelligence within the department. It was always my passion, because OSINT helps us understand human behavior and motivation and, at the same time, provides valuable tools for threat prevention and public safety. For me, OSINT is not just a method — it’s a mindset that connects facts, context, and people. 🔘How did the perception of OSINT change in recent years? Alana: A few years ago, OSINT was still seen as something very niche and often underestimated. That changed after the investigations of Bellingcat, which showed how powerful open-source verification can be. The Russian invasion of Ukraine made this even clearer — people around the world saw how OSINT can influence real-time decisions and reveal truth during war. Governments and institutions now understand that open-source intelligence offers early warning, situational awareness, and complements classified data. OSINT has become indispensable in hybrid conflicts and crisis response. 🔘Is OSINT as democratized as hacking? Alana: Yes and no. Anyone can start with OSINT — all you need is curiosity and an Internet connection. But professional OSINT requires ethical awareness, sound methodology, experience, and a reliable network of other OSINTers who can help you when you are stuck. It also demands data validation and operational security. The downside is that someone could, if they are inclined to, use the same techniques to spy on others, intimidate them, or misuse the collected information against a person. The key question is always how OSINT is used. Unlike hacking, which means overcoming barriers or doing what a system wasn’t designed to allow, OSINT should, when applied by public institutions, comply with the principles of the rule of law. Unfortunately, legislation often evolves more slowly than technology itself. That’s why it is crucial that the people developing laws also have a solid understanding of the subject matter. 🔘 How will AI shape OSINT in the coming years? Alana: Artificial intelligence will not replace analysts — it will make them faster and more efficient. AI can process vast data, detect patterns, and combine open-source with non-public information to create a more complete picture. OSINT is just one piece of this puzzle. At the same time, AI spreads misinformation, making truth harder to identify. Analysts will also use AI to detect manipulation and deepfakes. Everything that can be automated will accelerate — but critical thinking, contextual knowledge, and continuous training remain essential. The human factor stays decisive.

30

3 Comments

The White House's reluctance to sanction China for cyberattacks against U.S. critical infrastructure emboldens Beijing, exposing U.S. allies in the Indo-Pacific to increased cyber threats and undermining burden-sharing efforts. This inaction enables China to continue its cyber espionage with impunity. Organizations must prioritize strengthening cyber defenses and collaborating with allies to counter China's persistent cyberattacks across the Indo-Pacific region. 💥 #CyberNewsLive https://lnkd.in/e9jb-vEp

1

Why DoD Instruction 8582.01 Still Matters for the Defense Industrial Base If your organization processes or stores U.S. Department of Defense information, there is a foundational policy document you should understand: DoDI 8582.01 – Security of Non-DoD Information Systems Processing Unclassified Nonpublic DoD Information. Although many professionals focus on NIST SP 800-171, DFARS 252.204-7012, and CMMC, this instruction provides the underlying policy framework explaining why these requirements exist in the first place. Here are several key points worth remembering: 1️⃣ Protection of DoD Information Outside the DoD Network DoDI 8582.01 establishes that unclassified DoD information—including Controlled Unclassified Information (CUI)—must be protected even when it resides on non-DoD systems, such as contractor networks. The policy requires that appropriate security safeguards be implemented through contracts, grants, or other legal agreements. 2️⃣ Mandatory Cyber Incident Reporting If a contractor discovers a cyber incident affecting DoD CUI, the organization must: • Investigate the affected systems • Identify compromised data or accounts • Report the incident to the DoD within 72 hours through the DIBNet portal The organization may also be required to submit malicious software samples and preserve forensic evidence for at least 90 days to support potential DoD investigations. 3️⃣ Alignment with NIST SP 800-171 The instruction allows DoD contracting authorities to require contractors to demonstrate implementation of NIST SP 800-171 safeguards to protect DoD information. In practice, this requirement later became embedded in DFARS 252.204-7012 and ultimately the CMMC program. 4️⃣ Forensic Access and Damage Assessment Following a cyber incident, the DoD may request: • Access to affected systems or data for forensic analysis • Additional information to conduct a damage assessment of compromised DoD information This reinforces that protecting DoD information is not only a contractor responsibility—it becomes a shared operational response when incidents occur. 5️⃣ Protection of Contractor Proprietary Information Importantly, the instruction also states that the DoD must protect attributional and proprietary information submitted by contractors, preventing unauthorized disclosure. 📌 Bottom Line DoDI 8582.01 is one of the policy roots of the modern DoD cybersecurity compliance ecosystem. Understanding it helps explain how NIST 800-171, DFARS reporting requirements, and CMMC assessments all fit together. For organizations working in the Defense Industrial Base, this instruction is more than historical policy—it is part of the regulatory DNA behind today’s cybersecurity obligations. #CMMC #NIST800171 #DFARS DoD Instruction 8582.01 "Security of Non-DoD Instruction Systems Processing Unclassifided Nonpublic DoD Information, December 9, 2019" https://lnkd.in/ePtCG7Q4

5

The Senate Armed Services Committee wants the Department of Defense to examine its use of cyber power beyond the forces of U.S. Cyber Command. A provision in the committee’s version of the annual defense policy bill, of which an executive summary was released Friday, would require the secretary of defense to review future force employment concepts for cyber operations. The full text of the bill has yet to be released. Senior congressional officials that briefed reporters Friday pointed to the fact that to date, cyber operations and forces have largely been focused on the strategic level. More and more, there are other avenues to conduct digital actions, officials said, to include tactical cyber. https://lnkd.in/eu2HiZcq

2

Silentium has shown what’s possible when focus and determination lead the way. ✔ Exposures reported that gained recognition at the federal level through CISA and VINCE coordination ✔ Automation built to cut through the noise and deliver results in seconds ✔ Frameworks and tools developed that compete with what full teams rely on ✔ Solutions designed to simplify complex problems and streamline workflows ✔ Research pushed into areas like ICS, medical, and web where others often overlook critical risks ✔ A foundation strong enough to stand out in both cybersecurity and development The road ahead is about more than tools. Silentium is moving toward projects that can support government-level operations and secure systems that directly impact communities. The same drive that led to federal recognition is now being directed at building frameworks capable of scaling to national needs. It’s still just one person carrying the weight, but every late night and every project adds momentum. Silentium has moved past being an idea it’s now a force in motion, and this is only the beginning. #Silentium #Cybersecurity #CISA #VINCE #ICS #MedicalSecurity #WebSecurity #Innovation #Automation #OffensiveSecurity #DefensiveSecurity #SecurityResearch #FutureOfSecurity

1

NSA, ASD’s ACSC, and other agencies publish three Cybersecurity Information Sheets with guidance on SIEM and SOAR implementation May 27, 2025, National Security Agency https://lnkd.in/gkXh3r8R FORT MEADE, Md. – The National Security Agency (NSA) has joined the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and other agencies to release three publications providing guidance for cybersecurity executives and network defenders to consider when implementing Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) platforms.   SIEM solutions collect, aggregate, and correlate log data, empowering network defenders to monitor activity and uncover advanced cyber threats. SOAR platforms work hand-in-hand with SIEM tools, utilizing their data collection and analysis to deliver timely responses to detected malicious activity, especially in Zero Trust architectures. Implementing SIEM and SOAR Platforms: Executive Guidance:https://lnkd.in/ekkWe4zu Implementing SIEM and SOAR Platforms: Practitioners Guidance:https://lnkd.in/emUrWsZY Priority Logs for SIEM Ingestion: Practitioner Guidance:https://lnkd.in/ekmfnw66

30

2025 JTAT East will highlight many important aspects of the BTAM process. Det. Colleen Nase and Rachel Smith, LSW will tell us about the importance of "Unseen Threats: The Critical Role of Digital Evidence in Behavioral Threat Assessment". #threatassessment #threatmanagement #violenceprevention #ATAP #jtateast #investigations #digital #evidence

2

🚩 Management Advisory 🚩 The DoD OIG identified concerns about training and guidance, required markings, dissemination, and other issues related to controlled unclassified information (CUI), a category of unclassified information. Learn more, 🔗: https://lnkd.in/esnkDByd

21

1 Comment

The Cybersecurity Information Sharing Act (CISA) of 2015 has played a pivotal role in enhancing collaboration between Federal agencies, the private sector, and other stakeholders to combat cyber threats. A new GAO report highlights the significant progress made under the act, including the development of tools for sharing classified and unclassified threat information and ensuring protections for privacy and civil liberties. Thanks to CISA 2015, cyber threat data sharing has become more effective and timely. With the law set to expire this September, lawmakers and industry experts are calling for its reauthorization, with recommendations to streamline processes, align incentives, and address barriers like data classification concerns and resource constraints. Want to dig deeper? Read the full GAO report here. https://loom.ly/ahPokpY

1

Federal Agencies’ mission data has a long shelf life. PII/ PHI/CUI, case files, and diplomatic records often require confidentiality for 10–75 years. This makes the risk of exposure an ongoing focus. Federal migration to Post-Quantum Cryptography (PQC) is now a policy-driven priority. Although today’s quantum computers aren’t breaking mainstream encryption yet, the “harvest-now, decrypt-later” threat elevates risk to long-lived sensitive data. Learn more about the migration to PQC, the four areas federal agencies need to focus on and how to chart the best path forward in our new whitepaper: Evaluation Criteria to Meet Post-Quantum Cryptography Policies. https://hubs.ly/Q03Q57XY0 #Cybersecurity #CyberAware #Navigate

10

1 Comment

🔐 Attention Research & Educational Institutions: CMMC Final Rule is under OMB review - a critical milestone for those handling DoD research contracts and grants. Time to assess your institution's security posture and prepare for compliance to maintain research funding eligibility. #HigherEd #Research #CMMC #AWS #SRE

10

The Department of Defense has issued deviations to over half of the Defense Federal Acquisition Regulation Supplement (DFARS) Parts, all of which became effective earlier this month. These deviations reorganize and streamline some of the DFARS regulations and contract clauses that define contractors’ cybersecurity requirements. Roger Abbott, Adam Bartolanzo, Kathryn Carlson and Samara Rahman explain the changes and how they might impact government contractors. https://lnkd.in/e8tjezBw #GovCon #DFARS #CMMC

7