DHS Secret Databases Not Secure, Violations

In part from the report: Recognizing the importance of information security to the economic and national security interests of the United States, the Congress enacted Title III of the E-Government Act of 2002 (Public Law 107-347, Sections 301-305) to improve security within the Federal Government. Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction. Title III of the E-Government Act, as amended, entitled Federal Information Security Management Act of 2002, provides a comprehensive framework to ensure the effectiveness of security controls over information resources that support Federal operations and assets.

Components are not consistently following DHS’ policies and procedures to update the system inventory and plan of action and milestones in the Department’s enterprise management systems. Further, Components continue to operate systems without the proper authority. We also identified a significant deficiency in the Department’s information security program as the United States Secret Service (USSS) did not provide the Chief Information Security Officer (CISO) with the continuous monitoring data required by the Office of Management and Budget (OMB) during Fiscal Year (FY) 2014. Without this information, CISO was significantly restricted from performing continuous monitoring on the Department’s information systems, managing DHS’ information security program, or ensuring compliance with the President’s cybersecurity priorities. Subsequent to the completion of our fieldwork, USSS established an agreement with the DHS Chief Information Officer (CIO) to provide the required data beginning in FY 2015.

Evaluation of DHS Information Security Program for Fiscal Year 2015 revealed the existence of dozens of top-secret unpatched databases.
SecurityAffairs: The story I’m about to tell you is staggering, the US Department of Homeland Security is running dozens of unpatched and vulnerable databases, a number of them contained information rated as “secret” and even “top secret.”
The discovery emerged from the “Evaluation of DHS’ Information Security Program for Fiscal Year 2015” conducted on the department’s IT infrastructure by the US Government.
The audit of the DHS Information Security found serious security issues in the Government systems, including 136 systems that had expired “authorities to operate,” a circumstance that implies the stop of maintenance activities. The principal problem discovered by the inspectors is that a number of systems, despite are still operative and under maintenance have no up-to-date security patches, leaving them open to cyber attacks.


Of the 136 systems, 17 were containing information classified as “secret” or “top secret.”
Giving a deep look at the report on the DHS Information Security Program, it is possible to note that the Coast Guard runs 26 vulnerable databases, followed by FEMA with 25, Customs and Border Protection with 14, and the DHS’ headquarters with 11.

Although Secret Services have only two vulnerable databases, they have failed other targets.
It implemented proper security checks just for 75 percent of its secret or top secret databases, and just 58 per cent of its non-secret databases. The DHS targets are 100 per cent and 75 per cent respectively. The experts discovered several security issues affecting the majority of assessed systems, including PCs, databases and also browsers.
The assessments conducted to evaluate the DHS Information Security Program, revealed several deficiencies in the systems analyzed, for example, Windows 8.1 and Windows 7 workstations which were missing security patches for the principal software.
“We found additional vulnerabilities regarding Adobe Acrobat, Adobe Reader, and Oracle Java software on the Windows 7 workstations,” the department’s inspector general noted in a 66-page report. “If exploited, these vulnerabilities could allow unauthorized access to DHS data.”
The inspectors have found many other security issues in the DHS Information Security Program, including weak passwords, websites susceptible to cross-site and/or cross-frame vulnerabilities and poor security settings.
The Government environments suffer bureaucratic obstacles in bug fixing and patch management, it could take more than a year to fix a leak from the moment it is reported.


The results of the evaluation confirm that improvements have been made but there are a lot of serious issues that have to be urgently addressed.
“While improvements have been made, the Department must ensure compliance with information security requirements in other areas. For example, DHS does not include its classified system information as part of its monthly information security scorecard or its FISMA submission to OMB. In addition, USCG is not reporting its PIV data to the Department, which is a contradiction to the Under Secretary for Management’s guidance that requires Components to submit this information to the Department.5 In addition, we identified deficiencies with DHS’ enterprise management systems, including inaccurate or incomplete data.”
The report also provides a set of recommendations to solve the security issued emerged after the assessment.
The DHS has 90 days to fix the issues, two of which have been already solved.
Pierluigi Paganini

16 Terrorists in S. California Since 9/11

WHAT IS IN YOUR STATE?

NYPD, the premier law enforcement agency with a distinct terrorism division published a radicalization report in 2007, anyone take heed?

US terrorist database growing at rapid rate

ALEXANDRIA, Virginia (AP)— The U.S. government is rapidly expanding the number of names it accepts for inclusion on its terrorist watch list, with more than 1.5 million added in the last five years, according to numbers divulged by the government in a civil lawsuit.

About 99 percent of the names submitted are accepted, leading to criticism that the government is “wildly loose” in its use of the list.

Those included in the Terrorist Screening Database could find themselves on the government’s no-fly list or face additional scrutiny at airports, though only a small percentage of people in the database are actually on the list.

It has been known for years that the government became more aggressive in nominating people for the watch list following al-Qaida operative Umar Farouk Abdulmutallab’s failed effort to blow up an airplane over Detroit on Christmas Day 2009.

But the numbers disclosed by the government show submissions have snowballed. In fiscal 2009, which ended Sept. 30, 2009, 227,932 names were nominated to the database. In fiscal 2010, which includes the months after the attempted Christmas bombing, nominations rose to 250,847. In fiscal 2012, they increased to 336,712, and in fiscal 2013 — the most recent year provided — nominations jumped to 468,749.

What the FBI published on terrorism and the database. The searchable global terrorism database.

16 Southern California residents have been linked to Islamist terrorist activity since 9/11

LATimes: The FBI announced Friday that it is investigating the mass shooting Wednesday in San Bernardino as an act of terrorism. Tashfeen Malik, one of the assailants, pledged allegiance to an Islamic State leader in a Facebook posting before the attack, two federal law enforcement officials said Friday.

If the FBI declares the shooting an act of terrorism, it would be the first Islamic-terrorist attack in Southern California. But the region has experienced activities related to Islamic terrorism. The House of Representative’s Committee on Homeland Security said 16 Southern California residents have been tied to such activity since 2001:

Los Angeles

March 23, 2003

Hasan Akbar

Army Sgt. Hasan Akbar, who grew up in Watts, turned on his fellow soldiers while serving in Kuwait in 2003, shooting at officers and tossing grenades into their tents. Two officers were killed and 14 others wounded in the attack. In 2005, a military jury sentenced Akbar to death.
Read more »

July 27, 2005

Kevin James, Levar Haley Washington, Gregory Vernon Patterson and Hammad Riaz Samana

Law enforcement officials stopped a terrorist plot to attack religious institutions, military bases and airports. Officials said James, a former inmate at California State Prison, Sacramento, initiated the plot. While in prison, James headed a radical Islamic prison gang. After his release, he and Washington, another former inmate, recruited Patterson and Samana, from Washington’s mosque. All four were charged with conspiracy to conduct war against the U.S. government through terrorism. Washington and Patterson were sentenced to 22 years and 12 years, respectively. Samana was sentenced to 70 months in prison, and James was sentenced to 16 years. Read more »

May 22, 2015

Nader Elhuzayel and Muhanad Badawi

Elhuzayel and Badawi were arrested after expressing interest in traveling to Syria to join Islamic State. Federal authorities said they overheard a conversation between the two in which one proclaimed his desire to die as a martyr on a battlefield while fighting for the group. Elhuzayel was arrested at LAX before he boarded a plane for Turkey, and Badawi, who officials say purchased Elhuzayel’s ticket, was taken into custody at an Anaheim gas station. Both men have pleaded not guilty to charges of providing material support to a foreign terrorist organization. Read more »

Riverside

Nov. 16, 2012

Sohiel Omar Kabir, Ralph Deleon, Miguel Alejandro Santana Vidriales and Arifeen David Gojali

Deleon and Kabir were sentenced in February to 25 years in federal prison for a 2012 terrorist plot to travel to Afghanistan, join Al Qaeda and kill Americans. Vidriales and Gojali cooperated with authorities in the investigation and pleaded guilty to conspiracy charges. In March, Vidriales was sentenced to 10 years in federal prison; Gojali was sentenced to five years in federal prison. Read more »

Garden Grove

Oct. 11, 2013

Sinh Vinh Ngo Nguyen

Nguyen was arrested in 2013 while preparing to board a Mexico-bound bus in Santa Ana. He admitted to traveling to Syria the previous year to join opposition forces against the Bashar Assad regime. Authorities said Nguyen planned to become an Al Qaeda operative and lead an attack on coalition forces. He pleaded guilty to terrorism charges in December 2013. Read more »

Orange County

July 2, 2014

Adam Dandach

Dandach was arrested on July 2, 2014, at John Wayne Airport as he tried to board a plane headed to Istanbul, Turkey. He pleaded guilty in August to attempting to travel to Syria to join ISIS, and faces up to 25 years in federal prison. Read more »

San Diego

Oct. 9, 2009

Jehad Mostafa

An indictment was issued for Mostafa in 2009, alleging that he, a former resident of San Diego, conspired to provide material support to terrorists. Mostafa is currently believed to be in Somalia, possibly working with Shahab, an Islamist army with ties to Al Qaeda. Read more »

Aug. 26, 2014

Douglas McAuthur McCain

McCain, a San Diego resident, was reportedly killed while fighting for the Islamic State in Syria.
Read more »

April 16, 2015

Mohamad Saeed Kodaimati

Mohamad Saeed Kodaimati traveled to Turkey from San Diego in late 2012 and was in Turkey and Syria until he returned to the U.S. in March, according to prosecutors. Authorities allege that Kodaimati lied to federal officials about his links to Islamic State in Syria. He pleaded guilty to lying to the FBI and agreed to a prison sentence of eight years. His sentencing is set for Jan. 11. Read more »

Minneapolis is a Terror Axis, NPR

 

 

 

Trump and the Russian Mafia, Splain’n to do

Trump cant claim ignorance on this one.

Trump SoHo

At 45 stories, the Trump SoHo stands as the tallest building in SoHo, and one of the tallest in Manhattan. A five-star luxury condominium and hotel project between The Trump Organization and The Bayrock Group, the Trump SoHo exudes luxury at every turn.

Trump picked stock fraud felon as senior adviser

WASHINGTON (AP)— Donald Trump tapped a man to be a senior business adviser to his real-estate empire even after the man’s past involvement in a major Mafia-linked stock fraud scheme had become publicly known, according to Associated Press interviews and a review of court records.

Portions of Trump’s relationship with Felix Sater, a convicted felon and government informant, have been previously known. Trump worked with the company where Sater was an executive, Bayrock Group LLC, after it rented office space from the Trump Organization as early as 2003. Sater’s criminal history was effectively unknown to the public at the time, because a judge kept the relevant court records secret and Sater altered his name. When Sater’s criminal past and Mafia links came to light in 2007, Trump distanced himself from Sater.

But less than three years later, Trump renewed his ties with Sater. Sater presented business cards describing himself as a senior adviser to Donald Trump, and he had an office on the same floor as Trump’s own office in New York’s Trump Tower, The Associated Press learned through interviews and court records.

Deeper dive from the Courthouse News:

MANHATTAN (CN) – The Bayrock Group and Nixon Peabody are among 35 defendants sued for $1 billion, whom 13 plaintiffs, including estates of Holocaust survivors, accuse of “the illegal concealment of Felix Sater’s 1998 $40 million federal racketeering conviction, and subsequent 2009 sentencing.”
The summons and notice in New York County Supreme Court contains few details. Three of the six pages of the document are taken up with names of the parties, their attorneys, and the charges.
The Miami Herald reported last year that the CIA helped Sater conceal his conviction for securities fraud while using him to track down Stinger missiles for sale in his native Russia. This was “a decade before he launched the celebrated Fort Lauderdale Trump Tower,” the Herald reported in a Sept. 8, 2012 article.
But the Trump Tower failed, and “a legal battle has ensued between burned investors trying to reveal Sater’s background and federal agents who say national security is at stake,” the Herald reported.
Prosecutors in that case asked to keep Sater’s record sealed, in the national interest.
Sater was fined $25,000 for his original $40 million stock swindle, did no jail time and was not ordered to pay anything in restitution, according to the Herald.
In the new summons and notice in New York, a string of investors want to hold Sater and his attorneys and businesses responsible. The document does not mention the alleged CIA connection.
It states: “Plaintiffs seek relief against those directly and vicariously responsible for the perpetration of perhaps a billion dollars or more of fraud based on the illegal concealment of Felix Sater’s 1998 $40 million federal racketeering conviction, and subsequent 2009 sentencing, as well as related and other unrelated relief, and declaratory relief against those persons, primarily financial institution, insofar as to affix by liquidating judgment thereof such liability is owed to them.
“‘Bayrock,’ as used herein, refers to that certain association of juridical entities including, for example and without limitation, Bayrock Group LLC, Bayrock Camelback LLC, Bayrock Whitestone LLC, Bayrock Spring Street LLC, and Bayrock Merrimac LLC, in the last ten years variously engaged in the businesses of financial institution fraud, tax fraud, partnership fraud, insurance fraud, litigation fraud, bankruptcy fraud, mail fraud, wire fraud, money laundering, human trafficking, child prostitution, statutory rape, and, on occasion, real estate.
“One of the overarching, dominant themes of those Bayrock lines of business has been the fraudulent concealment of the substantial degree to which it was owned directly or equitably by Felix Sater, who was represented at various times at least during the period 2002 to 2008 to be its Chief Operating Officer and at times as its Managing Director.
“Another overarching, dominant theme of Bayrock’s lines has been the fraudulent concealment of Felix Sater’s conviction for racketeering, to which he secretly pled guilty in 1998, admitting to participating in the operation of a pump-and-dump stock fraud, along with members of Russian and Mafia organized crime, which defrauded investors, many of them senior citizens, including Holocaust survivors, of at a minimum $40,000,000, now in today’s dollars some $150,000,000 of stolen wealth as measured by the ‘well managed account’ theory.
“The Estates of Ernest and Judit Gottdiener; Ervin Tausky, a natural person, and Suan Investments, a Gottdiener family holding company, are some of those victims, survivors of the Nazi extermination of the Jews of Hungary and federally protected crime victims of Mr. Sater’s racketeering, as such his creditors. They were defrauded of their rights to restitution and, because the government illegally concealed Sater’s entire case, their rights to sue him. The Gottdieners claim damages for the fraud on them against everyone responsible for the 15-year delay and deprivation of their civil rights.
“Insofar as Sater used Bayrock as a personal piggybank to skim millions upon millions of its assets and hide them out of the reach (for now) of these and all the other hundreds if not thousands of victims to whom he now is liable over $500,000,000 in RICO damages, and would not have been able to do so without the facilitation of his concealment frauds by others, the Gottdieners sue all those for the damage they caused.
“Among those are corrupt attorneys who used fraudulent and sham court processes to hide Sater and his frauds for their own gain, as many of them did so with the specific intent, inter alia, of raking in fees from him, essentially taking the Gottdiener’s and all the others’ money for themselves by keeping it out of the hands of the victims, where it should have gone; they are sued, inter alia, for vicarious liability of all damages caused and for forfeiture of all such fees. …
“Finally, as Sater admitted at his sentencing he knew no banks would lend to Bayrock if they knew about his concealed conviction, a judicial estoppel and admission against penal interest, lenders and investors who were fraudulently induced to provide $1,000,000,000 or so to Bayrock by this concealment ought to get their money back, so they are sued in declaratory judgment to fix the liability of Bayrock and all those liable to them through Bayrock to them.
“All defendants except as noted are sued for all liability, that is, for example only, Kelly Moore, who stood in Sater’s sentencing as his attorney knowing it was illegally hidden, hearing him admit that he had been using that illegal concealment to perpetrate bank fraud, and without privilege to do so committed fraud and other actionable wrongs in maintaining sham litigation to stop those who learned of this from revealing it for years, thus knowingly facilitating the cover-ups, shall expect to have plenary liability asserted against her by every Plaintiff in every theory for every cause in the scope of the overarching conspiracy. It is the express intent of Plaintiffs to assert all liability to the fullest scope of the state law vicarious liability equivalent of civil federal Pinkerton liability against everyone participating in any identifiable and well-pled conspiracy. Those who thought nothing of helping Sater and his co-conspirators defraud, the littlest senior citizens and Holocaust survivors or the biggest banks and lenders, who thought nothing of helping him and others steal those victims’ money, must be made to pay with their own.”
Here are the defendants: Bayrock Group LLC; Tevrik Arif; Julius Schwarz; Felix Satter; Brian Halberg; Salvatore Lauria; Alex Salomon; Jerry Weinrich; Salomon & Co. PC; Akerman Senterfitt LLP; Martin Domb; Craig Brown; Duval & Stachenfeld LLP; Bruce Stachenfeld; David Granin; Nixon Peabody LLP; Adam Gilbert; Roberts & Holland LLP; Elliot Pisem; Michael Samuel; Mel Dogan; Bayrock Spring Street LLC; Does; Bayrock Whitestone LLC; Bayrock Camelback LLC; Bayrock Merrimac LLC; Bayrock Group Inc.; Tamir Sapir; Alex Sapir; Does; Walter Saurack; Satterlee Stephens Burke & Burke LLP; Kelly Moore; Morgan Lewis & Bockius LLP; Nader Mobargha; Michael Beys; Beys Stein & Mobargha LLP; and Todd Kaminsky.Here are the plaintiffs: J Kriss; Michael Ejekam; Bayrock Merrimac LLC; Bayrock Group LLC; Bayrock Spring Street LLC; Bayrock Whitestone LLC; Bayrock Spring Street LLC; Bayrock Whitestone LLC; Bayrock Camelback LLC; E/O Ernest; E/Ojudit Gottdiener; Ervin Tausky; Suan Investments.

More reading here and here.

Rahm Takes Family to Cuba for Vacation, Huh?

Emanuel Snaps at Politico Reporter for Revealing His Plans to Vacation in Cuba

In part WSJ: Should he call it a vacation? Lawyers said it was ok, so long as Mr. Emanuel and his family fall under one of the 12 categories.

“There are people who go on an archaeological dig on vacation, or harvest wine or go take classes,” said Augosto Maxwell, head of the Cuba practice at Miami-based law firm Akerman. “I don’t think it’s inappropriate at all to call it a vacation.”

A likely way for the Emanuels to travel to Cuba would be through a people-to-people exchange. They could travel with a group, or a travel company could arrange a private schedule for their family with activities that would fall under the “people-to-people” category.

People who travel to Cuba under the people-to-people category currently can’t go on their own and must go on organized trips with full schedules that usually include meetings, lectures, visits to small businesses, community projects, etc.

Before the regulations were loosened, Beyonce and Jay-Z took a much criticized trip to the island, but ultimately the Treasury Department determined their travel was legal as it was organized by a nonprofit with a license to organize “people-to-people” trips. Since the policy shift, organizations no longer need special licenses to organize such trips.

Other celebrities who have traveled to Cuba since the loosening of rules include Rihanna, Usher, Mick Jagger, Katy Perry, Paris Hilton and Naomi Campbell. The island has also received visits this year from three cabinet secretaries, three governors and scores of lawmakers. President Barack Obama hopes to travel to Cuba before leaving office.

Cuba needs cows and sugar, perhaps that is why Rahm Emanuel is really going there to represent some crony business opportunities. The black market thrives in Cuba, so  Rahm should be quite familiar with that.

Meanwhile, we have normalized relations with Cuba, well kinda sorta. So who is part of that team to continue nurturing the relationship?

A lingering chapter of the Cold War closed in December 2014, when the United States announced it would re-establish full relations with Cuba. Leading the reconciliation were two White House aides, Ben Rhodes and Ricardo Zuniga, who spearheaded more than 70 hours of secret talks with Havana on previously intractable issues such as prisoner swaps and easing economic sanctions.

In 2015, the State Department’s Roberta Jacobson and the Cuban Foreign Ministry’s Josefina Vidal seized the diplomacy baton, meeting to hash out the détente’s nuts and bolts. They sometimes clashed (on both countries’ harboring of fugitives, for instance) and faced complex politics (for example, Fidel Castro’s public call for the relinquishing of U.S. control of Guantánamo Bay, which the United States isn’t prepared to accept). Yet they still laid the groundwork for a new era of cooperation: In July, the United States and Cuba reopened their respective embassies in Havana and Washington for the first time in a half-century.

 

Unaccompanied Immigrant Children Placed With Convicted Criminals

FoxLatino: “Although the whistle-blower claims to have relayed these concerns to supervisors in August of 2015,” the senators wrote in a letter to the secretaries of Homeland Security and Health and Human Services, whose departments are responsible for processing the youths, according to the Los Angeles Times, “apparently these individuals have no immediate plans to remove [unaccompanied minors] from their criminal sponsors, but are ‘discussing options.'”

In August reports emerged that federal authorities had placed a half a dozen teenage Guatemalan boys in the care of human traffickers in Ohio. The boys were forced to live trailers and work 12 hours a day at an egg farm, while having their paychecks confiscated and threatened with death if they sought help.

“Based on what I’ve learned to date, I am concerned that the child placement process failure that contributed to the Ohio trafficking case is part of a systemic problem rather than a one-off incident,” Sen. Rob Portman (R-Ohio) said. “We continue to demand answers from the administration with the goal of uncovering how this abuse occurred and reforming the system to protect all minors against human trafficking.”

Immigration News: Unaccompanied Immigrant Children Placed With Convicted Criminals, Says Whistleblower

TheLatinPost: Two Republican senators have questioned if the Obama administration placed unaccompanied immigrant children with convicted criminals.

Republicans Sens. Chuck Grassley of Iowa and John Cornyn of Texas have asked U.S. Department of Health and Human Services (HHS) Secretary Sylvia Burwell and Department of Homeland Security Secretary Jeh Johnson if “unaccompanied alien children” (UAC) were released to sponsors with criminal records. The senators said a whistleblower alerted the Senate Judiciary Committee, which Grassley chairs, and made the allegation.

“According to the whistleblower, data compiled on a subset of UAC sponsors demonstrated that at least 3,400 sponsors of 29,000 listed in a UAC database have later been determined to have criminal convictions including re-entry after deportation, DUI, burglary, distribution of narcotics, domestic violence, homicide, child molestation, and sexual assault. Several of these criminal sponsors are even associated with, or actively engaged in, the practice of sex trafficking and human smuggling,” wrote Cornyn and Grassley in a letter to the HHS and DHS secretaries.

As the senators noted in their letter, an apprehended immigrant child is first processed by DHS’ law enforcement, and then transferred to HHS’ Office of Refugee Resettlement (ORR) to conduct background checks with the DHS’ Immigration and Customs Enforcement (ICE) agency in hopes to find a sponsor. The “whistleblower” alleged the background checks were “not thoroughly performed and sponsors are not properly vetted or even fingerprinted.”

Grassley and Cornyn wrote several questions for the DHS and HHS secretaries to respond until Dec. 7. Questions include:

– Of the sponsors currently listed in the UAC portal (database), how many have criminal records?

– Are background checks conducted and fingerprints taken on all potential UAC sponsors? Please explain.

– If a sponsor’s criminal record is discovered after the sponsor has already accepted UACs, what processes or procedures do the agencies have to ensure the UACs are not left in the criminal sponsor’s care? Please explain.

– How many UAC sponsors have been convicted of child molestation? How many UAC sponsors have been convicted of homicide? How many UAC sponsors have been convicted of crimes of violence including sexual assault and domestic violence?

– Do background checks of UAC sponsors include running the sponsor’s name through the National Crime Information Center? If not, why not? Please provide a list of all databases and background checks that are queried for all UAC sponsors.

“It is not the practice of the Office of Refugee Resettlement to place unaccompanied children with sponsors who have serious criminal convictions,” ORR spokesman Mark Weber said in a statement. “The safety of the children is our primary concern and any allegation of even potential harm is taken seriously and will be investigated.”

Weber added that the ORR maintains a database for staffers to monitor sponsor’s names, addresses and assessments in addition to the number of time the sponsor requested a UAC.

According to the ORR, and based on info as of September, 27,520 unaccompanied minors have been released to sponsors during the 2015 fiscal year, which began in October 2014.