Bottom line: The US government has been using advanced hacking tools to target American citizens without transparency or oversight.
What's happening: Sen. Ron Wyden (D-OR) and Rep. Greg Casar (D-TX) are requesting a GAO probe into the government's use of spyware and other sophisticated hacking tools, including the alleged use of FinFisher by the FBI's Cyber Division, against US citizens. This probe will investigate the potential misuse of these tools, particularly those used for surveillance, under the guise of national security. The probe will also examine the FBI's acquisition of a license for the FinFisher spyware, which is linked to a 2019 CVE-2020-1579 vulnerability.
What to do: Security leaders should consider implementing robust incident response plans to address potential unauthorized access to US citizens' data, as well as monitoring their organizations for any suspicious activity related to FinFisher or similar spyware. Additionally, security leaders should review their internal policies and procedures to ensure they align with the government's use of advanced hacking tools, particularly those used for surveillance.