
据两位知情人士透露,由于一家政府承包商遭到网络攻击,美国交通部下属的安全机构联络中心一度被迫暂停服务。由于未经授权公开发言,这两人要求匿名。
A Department of Transportation safety agency contact center was temporarily taken offline after a government contractor was targeted by a cyberattack, according to two people with knowledge of the situation granted anonymity because they were not authorized to speak on the record.
由联络中心服务供应商Senture负责运营的联邦汽车运输安全管理局联络中心,于10月6日在社交媒体上首次报告出现技术故障。目前尚不清楚此次攻击始于何时,亦不确定是否仍在持续。
The Federal Motor Carrier Safety Administration’s contact center, run by contact center support provider Senture, first reported technical difficulties on social media on Oct. 6. It’s unclear when the attack began or whether it’s ongoing.
此次网络攻击此前并未被报道,它影响了一个名为Motus的新在线平台——该平台旨在为大型卡车及车辆驾驶员提供帮助。
The cyberattack, which has not been previously reported, affected a service intended to help drivers and operators of large trucks and vehicles through a new online platform called Motus.
美国交通部向POLITICO证实:“由Senture运营的联邦汽车运输安全管理局联络中心遭遇了网络攻击,导致其域名服务及电话功能全面瘫痪。”该部门还表示,管理局的数据并未遭到泄露,相关调查正在进行中。Senture方面未对置评请求作出回应。
“The FMCSA Contact Center, run by Senture, had a network attack that brought down their domain, which included phone capabilities,” DOT confirmed to POLITICO. They added that FMCSA data was not compromised and that an investigation into the incident is ongoing. Senture did not respond to a request for comment.
自今年5月上线以来,Motus平台就频频出现各类故障报告。据第一位知情人士称,卡车司机们一直依靠联络中心来解决这些问题;如今联络中心无法使用,他们便很难确保自己所需的运营相关记录保持最新状态。
Motus has been plaguedby reports of errors since its rollout in May. Truckers have utilized the call center to resolve these issues, and without it, they have few ways to ensure the records they need to operate on the road are up to date, the first person said.
公开记录显示,Senture还承接了消费者金融保护局以及总务管理局的政府合同。这两家机构均未回应关于其系统是否也出现类似故障的询问。
Senture also holds government contracts with the Consumer Financial Protection Bureau and the General Services Administration, according to public records. Neither responded to a request for comment on whether any of their systems were experiencing similar outages.
第一位知情人士指出,此次攻击似乎借助了人工智能技术,因为攻击者能迅速对特定系统展开探测。某些先进的人工智能模型能够在各类操作系统中快速发现并利用安全漏洞,其速度远超人类。
The first person familiar with the incident said the attack appeared to have been augmented by artificial intelligence technology because it probed certain systems so quickly. Some advanced AI models can find and exploit vulnerabilities across operating systems faster than any human.
尚不清楚美国交通部(DOT)是否已就此次网络攻击通知立法者或其他相关联邦机构。根据《联邦信息安全现代化法案》,联邦机构必须向美国网络安全与基础设施安全局(CISA)报告事件,“如果联邦行政部门下属民用机构的信息系统的机密性、完整性或可用性可能受到损害”。网络安全与基础设施安全局的一名发言人拒绝置评,并将问询转介给了美国交通部。该机构通常负责协助调查针对政府网络的攻击。
It’s not clear whether DOT has notified lawmakers or other relevant federal agencies of the cyberattack. Under the Federal Information Security Modernization Act, federal agencies must report incidents to CISA “where the confidentiality, integrity, or availability of a federal information system of a civilian Executive Branch agency is potentially compromised.”A spokesperson for the Cybersecurity and Infrastructure Security Agency, which typically helps investigate attacks on government networks, declined to comment and directed POLITICO to DOT.
负责监督交通部的众议院交通委员会和参议院商业、科学及交通委员会的负责人各自的发言人,均未回应置评请求。
Separate spokespeople for the leaders of the House Transportation Committee and the Senate Commerce, Science and Transportation Committee, which oversee the Department of Transportation, did not respond to requests for comment.
这是近几周以来针对联邦机构的第三次重大网络攻击。美国联邦调查局(FBI)仍在调查其上个月发生的职位门户网站数据泄露事件,该事件导致其大部分员工的个人信息外泄;而另一起发生在上个月的五角大楼系统数据泄露事件,则暴露了数百万五角大楼员工的敏感数据。
This is the third major cyberattack on a federal agency in recent weeks. The FBI is continuing to investigate a breach of its jobs portal last month that exposed the personal information of most of its personnel, while a separate breach of a Pentagon system last month exposed sensitive data on millions of Pentagon staff.