MathCraft Newsletter

Phishing attack targets DCSA:“DCSA has been made aware of a sophisticated malicious phishing email circulating which references the collection of an “SF-86_F” or an SF-86 (an example of the email is below).  Please do not engage with this email and advise your staff not to engage with it; you should report it to your security office or cyber security team and delete it immediately if received.” 

Email Example:

ALCON,

Due to a number of high profile spillages and intelligence leaks, all federal and DoD Contract employees are required to view the “DoD Reporting and You” powerpoint training and respond to a six question self-report addendum to their SF-86. 

If your response is “yes” to any of the addendum questions, you will need to fill out a SF86_F form for each affirmative answer. 

The training and addendum questionnaire can be found here: SF-86 Addendum (this is where the malicious link generally is) READ MORE

5 key insights from the NCMS conference: “We’re in the midst of major changes and improvements in the security clearance process. Security isn’t a solo enterprise. From the applicant, to the FSO, to the CEO, everyone needs to keep a proactive security posture. Our national security depends on it.” READ MORE

Classified Meeting Notes: A Persistent Clearance Holder Dilemma: “Note-taking during meetings is often construed as a sign of diligence and respect; a practice to be encouraged for those who want to get ahead in the workplace. But when it comes to classified meetings, those notes can create big problems if not handled correctly.” READ MORE

Keep Job Scams From Hurting Your Organization: “From fake job listings that ding your reputation to fake job applicants who hack your network, job scams are a major threat.” READ MORE

60K+ Android Apps Have Delivered Adware Undetected for Months: “A campaign targeting mainly US users disguised malware in fake security software, game cracks, cheats, free Netflix, and other “modded” apps.” READ MORE

Do I Need to Report My Foreign Gamer Friends on the SF-86?: “Security clearance holders are required to report foreign contacts on the SF-86 or self report new contacts. But should a security clearance holder who regularly plays games with foreign members be concerned?” READ MORE

Inside the Five Eyes Alliance: Leaks and Breaches Across the Globe: “Our partner countries have become justifiably concerned about recent events, especially as it relates to the “Discord-Ukraine” event and rightfully so. However, due to the massive amount of intelligence we gather and having to shift to the insensitive name Four Eyes, I do not think our partnership with them is in jeopardy anytime soon, but it still is a very bad look.” READ MORE