Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Network Security

Snowden Used Password From NSA Co-worker: Report

WASHINGTON – A civilian employee at the National Security Agency has been disciplined after admitting he gave intelligence leaker Edward Snowden his personal encryption details, NBC News reported Thursday.

WASHINGTON – A civilian employee at the National Security Agency has been disciplined after admitting he gave intelligence leaker Edward Snowden his personal encryption details, NBC News reported Thursday.

The employee was among three workers at the NSA who have been sanctioned after being “implicated” in the unprecedented security breach that allowed Snowden to leak a trove of classified documents, according to a memo to lawmakers cited by NBC.

The civilian employee told FBI agents that he provided Snowden with his personal encryption information but was “not aware” the IT contractor planned to divulge secret files to the media, according the the NSA memorandum.

The civilian, who was not named, has been stripped of his security clearance and recently resigned, it said.

The spy agency memo says that the civilian employee shared with Snowden his “public key infrastructure certificate” details, part of an elaborate security system designed to safeguard intelligence computer networks.

In addition, Snowden then asked the civilian to type in his password on his computer terminal, the memo said.

“Unbeknownst to the civilian, Mr. Snowden was able to capture the password, allowing him even greater access to classified information,” the memo states.

The account suggests Snowden employed a degree of deception to get his hands on sensitive information, an allegation raised in previous media reports.

Advertisement. Scroll to continue reading.

But in a public Google chat in January, Snowden denied media reports that he stole or deceived fellow employees to get their log-in information.

“I never stole any passwords, nor did I trick an army of co-workers,” Snowden said.

In addition to the civilian worker, an active duty member of the military and a contractor were banned from NSA buildings in August as they are tied to actions that may have helped Snowden carry out his bombshell leaks, according to the memorandum.

“Further accountability will be determined by their individual employer, not NSA,” the memo said, without providing further details.

The February 10 letter to the House Judiciary and Intelligence committees was described as an “update” on an internal investigation into who was responsible for the massive security breach that permitted Snowden to expose the NSA’s far-reaching electronic spying.

Some lawmakers have sharply criticized the spy agency over its handling of the security breach and demanded to know why no senior figure has been sacked or held accountable over the Snowden affair.

When contacted by AFP, the NSA declined to comment on the memorandum. 

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

Professional services company Slalom has appointed Christopher Burger as its first CISO.

More People On The Move

Expert Insights

Related Content

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

Malware & Threats

The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently...

Cybersecurity Funding

Network security provider Corsa Security last week announced that it has raised $10 million from Roadmap Capital. To date, the company has raised $50...

Network Security

Attack surface management is nothing short of a complete methodology for providing effective cybersecurity. It doesn’t seek to protect everything, but concentrates on areas...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...

Network Security

A zero-day vulnerability named HTTP/2 Rapid Reset has been exploited to launch some of the largest DDoS attacks in history.