Transforming and securing the @DeptofWar digital ecosystem is an active, ongoing mission that requires continuous innovation. Today, @DoWCIODavies officially opened nominations for the 26th Annual CIO Awards to spotlight those who drive cybersecurity and empower our warfighters with data supremacy and decision dominance on the battlefields of today and tomorrow.
Leaders are encouraged to nominate champion performers by October 30, 2026, 12:00 pm EST. Nominate here: dowcio.war.gov/About/Awards/
Read more at: dowcio.war.gov/In-the-News/A…
@DoW_CIO retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
We recommend Cisco users disable the Smart Install (SMI) auto-loading feature on all NSS and DIB network devices to mitigate exploitation by remote attackers. Have you taken this action? Read more: media.defense.gov/2019/Jul/1… #CybersecurityAwarenessMonth

ALT The image displays a list titled "SMI Mitigation Actions" with a background of a gear and network motif. The list includes: 1) Disable Smart Install auto-loading feature on all network devices. 2) Review Cisco switch configuration files for deviations from documented pre-existing configurations. 3) Implement deny by default strategy at edge firewall devices and ensure TFTP (UDP port 69) and SMI (TCP port 4786) are denied.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
If you’re a Defense Industrial Base partner looking for practical, no cost or low-cost cybersecurity resources, you don’t have to look far. In our latest Brilliant at the Basics Cybersecurity Awareness Month reel @DeptofWar CISO Aaron Bishop shares how our IT and OT Top 10 lists can help your organization strengthen resilience, manage cyber risk, and protect critical systems.
Watch the reel and explore the whole collection.
dowcio.war.gov/BrilliantBasi…
The portal for the 26th Annual CIO Awards closes October 30, 2026, at 12:00 PM EST. Across @DeptofWar teams are hardening networks, pushing mission software to the edge, and out-innovating adversaries in real time.
Component Commands, Services, Departments and Agencies, and inter-governmental defense partners – don’t miss this chance to ensure your highest-performing cyber and IT personnel receive the recognition they earned.
Details and submission portal: dowcio.war.gov/About-DoW-CIO…
Be Secure. Cybersecurity does not stop at the screen.
Physical security helps protect personnel, facilities, our technology ecosystem, and data from actions that can create serious risk. A misplaced badge, unlocked workstation, unattended device, or unsecured document can create an opening for unauthorized access.
You should always secure devices, badges, and sensitive materials before stepping away from your workstation or leaving a facility. Do not prop doors open or allow others to follow you into controlled spaces without using their own authorized credential.
Whether you are a warfighter, member of the @DeptofWar workforce, or Defense Industrial Base, strong physical security is a key part of being Brilliant at the Basics.
DoW CIO commends the collaborative effort of @NSACyber, @NIST, and @CISAgov in delivering practical guidance for managing the risks associated with super intelligence control incidents. We are in an unprecedented period of technological advancement, and these practices offer a strong opportunity to strengthen resilience, improve incident readiness, and better protect the systems that support national security.
We encourage all network defenders and those safeguarding National Security Systems across the @DeptofWar and Defense Industrial Base to read the report.
media.defense.gov/2026/Oct/1…
xitter.cf/NSACyber/status/211251…
NSA joined @NIST and @CISACyber in releasing guidelines for managing SI control incidents. Organizations utilizing SI are encouraged to adopt these practices. Read the joint report: media.defense.gov/2026/Oct/1…
A flat network is a vulnerable network. Logically separating business IT networks from critical operational technology (OT) systems helps limit lateral movement and contain a potential intrusion before it disrupts core operations.
Eligible small DIB businesses can also explore @NSACyber's Continuous Autonomous Penetration Testing (CAPT), an AI-powered capability that enables internal-network penetration testing at no cost and without prior expertise.
NSA’s CAPT is designed to help eligible small businesses assess internal networks and validate remediation.
Learn more at nsa.gov/About/Cybersecurity-…
This week’s @DeptofWar Brilliant at the Basics Cybersecurity Awareness Month campaign theme is Be Secure. In our latest reel, Deputy CIO for Operations Christine Condon shares a simple, yet important tip regarding government-furnished equipment.
Watch the whole reel to learn more.
Don't fall for Harry The Hamster's tricks. Social engineering is one of the most effective tools used by our adversaries. AI has increased the sophistication of the attacks and the data available to the attackers. Every member of the @DeptofWar team must be constantly vigilant to counter these tactics.
Indicators of a social engineering attempt include:
•Unsolicited requests for personal or financial information.
•A sense of urgency or pressure to act quickly.
•Suspicious email addresses or unusual grammar.
•Promises that seem too good to be true.
Verify before you trust to be Brilliant at the Basics!
Congratulations to Farah Pathan, the DoW CIO’s program analysis and IT asset management lead, on receiving the Leading for IMPACT Women in Leadership Award!
The award recognizes women whose leadership, mentorship, and mission focus make a meaningful difference across the federal community.
Farah’s recognition reflects the expertise and commitment she brings to the @DeptofWar CIO team every day. We’re proud to have her on our team.
Insider threats are among our most complex and hard to recognize risks because they are deliberately designed to avoid detection. During Cybersecurity Awareness Month, and every month, all @DeptofWar personnel and industry partners must be vigilant every day.
Spotting the subtle indicators of recruitment or network exploitation protects our Information and Operational Technology. Know the signs: changes in behavior, unexplained affluence, accessing information not needed for their job, and more.
If you See Something, Say Something. Be Brilliant at the Basics!
Today, Honorable Kirsten Davies also welcomes Mr. Kenneth Nienhuser to his new role as the Deputy Chief of Staff. He assumes this position after serving as the lead for the office’s industry outreach, coordinating executive-level engagement processes, strategic communications, and decision-support materials. A Marine Corps veteran, Mr. Nienhuser brings a wealth of experience supporting senior @DeptofWar leaders to the position.
@DoW_CIO retweeted
Today, I am signing The Vice President’s Pledge to Protect Americans from Fraud to reaffirm a shared commitment to protect Americans from fraud.
Cyber fraud threatens individuals, families, and organizations alike. The @DeptofWar OCIO remains focused on strengthening cybersecurity to protect the ecosystem that powers our warfighters.
During Cybersecurity Awareness Month, the @DoW_CIO’s Brilliant at the Basics campaign reinforces practical habits that can reduce fraud risk—from protecting credentials and verifying requests to recognizing suspicious messages.
I encourage everyone to stay vigilant and apply these simple safeguards to help protect personal information, the Department, and the mission.
Today, Honorable Kirsten Davies welcomed Mr. Jon Steinbach as Strategic Technical Advisor. Mr. Steinbach brings more than three decades of experience developing creative solutions for complex problems at the strategic, operational, and tactical level across the public and private sectors. His background includes a variety of positions with the CIA, U.S. Special Operations Command and U.S. Marine Corps.
His experience at the intersection of national security, cybersecurity, technical innovation, and business growth will help inform the @DeptofWar CIO’s efforts to deliver secure, resilient technology capabilities in support of the warfighter.
dowcio.war.gov/In-the-News/A…
Comprehensive asset awareness and management is foundational to dismantling cyber threats and protecting the @DeptofWar mission. Our #2 Best Practice emphasizes that a complete, rigorous, “as-operated” inventory of all assets is a foundational requirement for robust IT and OT cybersecurity. You cannot defend what you cannot see.
We encourage our industry partners to leverage available resources to strengthen their security posture. Valuable tools include:
- @NSAGov's Attack Surface Management (ASM) for Cleared Defense Contractors): nsa.gov/Portals/75/documents…
- @CISAgov's Cyber Hygiene Services, available at: cisa.gov/cyber-hygiene-servi…
- CISA's Cybersecurity Evaluation Tool (CSET®), available at: cisa.gov/resources-tools/ser…
Partner with us to build a more secure industrial base. Be Brilliant at the Basics!
Cyber-attacks frequently target weak authentication mechanisms. To counter this threat, the @DeptofWar CIO highlights Phishing-Resistant Multi-Factor Authentication (MFA) as the #1 recommended best practice on our Brilliant at the Basics IT Top-10 Best Practices list.
Protect your sensitive corporate assets and DoW information. The resources below can help you implement phishing resistant MFA across your networks.
Learn more at:
fidoalliance.org/specificati…
fidoalliance.org/passkeys/
cisa.gov/resources-tools/ser…
As DoW CIO Hon. Davies stressed, using strong, unique passwords remains as one of the simplest, yet most effective frontline practices that help protect your accounts and the @DeptofWar.
Reusing passwords opens a security risk that can put all of your accounts at risk, and malicious actors know this. Stay alert for unexpected password-reset messages, account alerts, or login prompts. These messages may be attempts to get you to share credentials or click a malicious link.
Adopting just a few of these habits can make you Brilliant at the Basics.
Be Vigilant. In today’s Brilliant at the Basics reel @DeptofWar Chief Information Officer Hon. @DoWCIODavies shares how protecting PINs, using strong passwords, enabling multifactor authentication, and safeguarding your Common Access Card is fundamental in securing your personal information and the DoW.



















