The latest executive order pushes Washington to crack down on cyber fraud, but a different mandate eases software security accountability, leaving an inconsistent strategy that keeps the attack surface cheap to exploit.
The post If consequences matter, they should apply to vendors, too appeared first on CyberScoop.
The vendor said six of the 83 vulnerabilities it addressed this month are more likely to be exploited.
The post Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero-days appeared first on CyberScoop.
AI is speeding up attacks but otherwise not changing their fundamental nature, said FBI official Jason Bilnoski.
The post FBI says even in an AI-powered world, security basics still matter appeared first on CyberScoop.
Amazon sued the AI browser company last year, accusing them of computer fraud, accessing password protected accounts and buying items.
The post Federal judge blocks Perplexity’s AI browser from making Amazon purchases appeared first on CyberScoop.
Attackers can exploit the defect in the widely deployed pac4j with relative ease, but researchers haven’t observed active exploitation in the wild.
The post Critical defect in Java security engine poses serious downstream security risks appeared first on CyberScoop.
The State Department frames data sovereignty and innovation as opposing forces. Modern encryption proves we can have both.
The post No, it’s not ‘unnecessarily burdensome’ to control your own data appeared first on CyberScoop.
The national cyber director is pitching an approach that blends cyber operations with diplomacy, law enforcement and pressure on CEOs to shore up their organizations.
The post Sean Cairncross lays out what’s coming next for Trump’s cyber strategy appeared first on CyberScoop.
Hackers have cut their attack timelines from weeks to hours while the government spreads resources too thin. We need to stop pretending we can protect everything and start focusing on what would hurt us most.
The post We’ve seen ransomware cost American lives. Here’s what it will actually take to stop it. appeared first on CyberScoop.
The administration also released an executive order on cybercrime and fraud.
The post The long-awaited Trump cyber strategy has arrived appeared first on CyberScoop.
Attackers have turned AI into a “force multiplier” for the country’s expansive scheme to get and keep operatives hired at global companies, researchers said.
The post Microsoft warns North Korean threat groups are scaling up fake worker schemes with generative AI appeared first on CyberScoop.
Two sources tell FedScoop the personnel changes are part of a broader effort to consolidate IT and cybersecurity functions at DHS headquarters.
The post DHS CISO, deputy CISO exit amid reported IT leadership overhaul appeared first on CyberScoop.
A House committee reauthorized an Energy Department program that funnels hundreds of millions of dollars and cybersecurity assistance to rural electric utilities.
The post Congress looks to revive critical cyber program for rural electric utilities appeared first on CyberScoop.
The bureau didn’t provide any further details on the incident, which reportedly targeted a network for managing surveillance activity.
The post FBI targeted with ‘suspicious’ activity on its networks appeared first on CyberScoop.
HHS has updated its free RISC 2.0 toolkit with a new cybersecurity module, asking hospitals to assess digital threats alongside hurricanes, power failures and other hazards.
The post HHS updates a free risk tool to help hospitals size up their cybersecurity exposure appeared first on CyberScoop.
The 43-year-old Russian national ran a ransomware operation that impacted more than 1,000 victims globally. The conspiracy netted more than $39 million in extortion payments.
The post Phobos ransomware leader pleads guilty, faces up to 20 years in prison appeared first on CyberScoop.
The vendor said it’s not aware of any active exploitation of the vulnerabilities, which could allow remote attackers to achieve root access and execute code.
The post Cisco reveals 2 max-severity defects in firewall management software appeared first on CyberScoop.
Microsoft, which led the effort, said it seized 330 domains that powered the phishing platform’s core infrastructure. The alleged creator was also named in a civil complaint.
The post Global coalition dismantles Tycoon 2FA phishing kit appeared first on CyberScoop.
The author of a new study told CyberScoop he's "very worried,” describing deanonymization capabilities of AI as a “large scale invasion of privacy.”
The post LLMs are getting better at unmasking people online appeared first on CyberScoop.
The marketplace was one of the world’s largest hubs for cybercrime with more than 142,000 members. Officials identified and arrested multiple suspects after seizing the site’s database.
The post Authorities from 14 countries shut down major cybercrime forum LeakBase appeared first on CyberScoop.
Blind spots in complex cloud environments allow identity-based attacks to achieve the same outcome as complex malware or zero-day exploits. Sophistication need not apply.
The post Attackers are using your network against you, according to Cloudflare appeared first on CyberScoop.
