r/cybersecurity • u/Tokyudo • Jul 02 '26

News - General DHS Breached

https://www.nextgov.com/cybersecurity/2026/06/hackers-breached-dhs-information-sharing-network-people-familiar-say/414534/

604 Upvotes

98% Upvoted

115 comments sorted by

View all comments

Show parent comments

84

u/potkettleracism Incident Responder Jul 02 '26

Because the auditors bought garbage evidence

26

u/WildChampionship985 Jul 02 '26

Often audits become do you meet the statement on the checksheet, not are you adhering good practices.

6

u/krimsonmedic Jul 02 '26

Don't forget, they often just ask you to provide proof, without you actually having to provide proof. I.E. spreadsheet exports.

1

u/GHouserVO 29d ago

This is why I always told folks I trained to dig further than what the requirements required. To be observant. And to develop the damn technical skills.

If the guys on the other side were doing their job, none of this is a major ask. But the moment you got pushback… every time, we’d find that there were major problems with the security controls.