Despite information security progress, the IRS still has deficiencies in controls over taxpayer data, according to a GAO study that found insufficient controls in identity authentication, server access, encryption of authentication data, auditing systems to ensure compliance with agency policies, and access to restricted areas. […]

It’s tax season, and the IRS is warning of scams. The IRS alerted human resource and payroll specialists of a phishing scam called “spoofing,” where a cybercriminal will send an email in the name of a company “CEO” or executive asking personal information, including a PIN or Social Security number, from an employee. […]