Topic · 15 articles
Government & Defense
Federal, defense, and state and local mission data.
Spans Federal & Defense, Threat Brief and Sector Spotlight.
Labels you can enforce: a manager’s guide to metadata hygiene for Zero Trust, ACP 240, and STANAG
Zero Trust and coalition data sharing both depend on one thing most programs underfund: accurate labels on files. What the standards expect, where labels usually go wrong, and the questions a program manager should be asking.
7 min read
FY2027 is here: what the DoD Zero Trust data pillar requires, and what storage has to prove
Fiscal 2027 began October 1, the last year components have to reach Target Level Zero Trust. Seventeen of the 91 Target activities sit in the data pillar, and several of them land on storage.
6 min read
The FBI jobs portal claim: a recruiting front door, and what the attackers say sat behind it
ShinyHunters defaced FBIjobs.gov and claims it reached HR, medical, and psychiatric evaluation records from there. The FBI has acknowledged employee data was stolen but has not said where the breach began, which is the question a file-level audit answers.
6 min read
Government data breaches in 2026: a running list, and the patterns underneath it
A running list of notable 2026 government data breaches, from county networks to the FBI and the Pentagon, updated monthly, with the patterns that repeat across them.
6 min read
The Pentagon personnel breach: nine months of file access, and a scope still written as “may”
Unauthorized users accessed unencrypted military personnel files on a Defense Manpower Data Center file-sharing system for nine months before the flaw was found. The notice to victims does not say how many people were affected.
7 min read
Isolation contained the incident. It did not protect the files.
A standalone ATF system, wired to nothing else, still held the case folders a ransomware group published. Segmentation bounded the intrusion. It never watched the files.
6 min read
Berlin will not pay. It still has to know what left.
Berlin refused a 30-bitcoin ransom after a data theft from one Senate department. The most detailed inventory of what left is still the attacker’s leak-site listing.
6 min read
CJIS Security Changes for 2026 and 2027: What State and Local Agencies Need to Know
Two dates shape CJIS planning for state and local agencies: the FIPS 140-2 sunset, which took effect on September 22, 2026, and the end of the zero-cycle period on September 30, 2027. Here is what each one actually requires, and why so much of the work lands on storage.
11 min read
Valid logins, an MFA bypass, and 678,000 records: the French tax breach
France’s tax administration disclosed that an attacker used a staff account and a contractor account, plus a multi-factor bypass, to consult and extract data on 678,000 people and businesses. Nothing was encrypted. Every query looked like work.
5 min read
Harvest now, decrypt later: post-quantum encryption reaches the data layer
Two executive orders, three NIST standards, and NSA’s CNSA 2.0 have turned post-quantum cryptography from research topic into procurement requirement. What the mandates actually say, and how BrickStor SP is post-quantum ready for data at rest and data in transit.
6 min read
Sharing without surrender: NATO’s data strategy and the storage layer
NATO’s Data Strategy for the Alliance sets a 2030 target: federated data sharing across the Alliance while every ally keeps control of its own data. Sharing and sovereignty at once is not a networking problem. It is a mandate for enforcement that lives where the data lives.
6 min read
Zero Trust reaches the data pillar
What Zero Trust security is, where it came from, and how the CISA and DoD Zero Trust Maturity Models differ, who each applies to, and why both converge on the data pillar.
9 min read
CUI lives in files. Protect it there.
Controlled Unclassified Information is overwhelmingly unstructured: drawings, specs, contract documents on file shares. CMMC compliance increasingly comes down to whether you can label, control, and account for those files, which is exactly what data labeling and ABAC at the storage layer deliver.
7 min read
Understanding CMMC: A Practical Guide for Defense Contractors
What CMMC is, who must comply, the three levels, the phased enforcement timeline through 2028, and the path to certification for defense contractors handling FCI and CUI.
10 min read
A government paid $1 million to Kairos — and the blockchain shows it recovered nothing
Fresh analysis this week traces a roughly $1 million extortion payment from a U.S. government entity to the Kairos group, for data that was never encrypted, only stolen. The payment is visible on the blockchain. The files were taken anyway.
5 min read
See data-layer defense in your environment
In a 30-minute demo we’ll show Active Defense stopping an attack inline, immutable recovery, and surgical rollback — mapped to your data and your threats.