via Heather Kuldell, reporting for DefenseOne, comes the sorry tale of the fundamental failure of information security capability, this time at the Department of Defense, and revolving around the lack of control of what bits are installed on the Department's networks worldwide. All this, via the latest Department of Defense Office of the Inspector General's Report, DoD Management of Software Applications DODIG-2019-037. Astounding.