The six-pillar document covers a lot of ground in a short space, and could be followed by an executive order implementing it, according to sources familiar with the draft.
The post Five-page draft Trump administration cyber strategy targeted for January release appeared first on CyberScoop.
Muneeb and Sohaib Akhter previously pleaded guilty to hacking into the State Department and other cybercrimes in 2015.
The post Twins with hacking history charged in insider data breach affecting multiple federal agencies appeared first on CyberScoop.
The open-source code library is one of the most extensively used application frameworks. Wiz found vulnerable versions in around 39% of cloud environments.
The post Developers scramble as critical React flaw threatens major apps appeared first on CyberScoop.
A year after Chinese hackers were found in U.S. telecom networks, Congress and federal agencies have taken few concrete actions to stop the next hack.
The post The Congressional remedy for Salt Typhoon? More information sharing with industry appeared first on CyberScoop.
The Ivy League school said it was one of almost 100 organizations hit by the simultaneous attacks in August.
The post University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks appeared first on CyberScoop.
The bill is a bid at further deterring cyberattacks, a sentiment with growing focus on the Hill and in the Trump administration.
The post Legislation would designate ‘critical cyber threat actors,’ direct sanctions against them appeared first on CyberScoop.
The company’s latest security update contains the second-highest number of defects patched so far this year.
The post Google addresses 107 Android vulnerabilities, including two zero-days appeared first on CyberScoop.
The cryptocurrency mixing service helped cybercriminals launder more than $1.5 billion in Bitcoin since it began operations in 2016, Europol said.
The post Authorities take down Cryptomixer, seize $28M in Switzerland appeared first on CyberScoop.
OnSolve CodeRED was damaged by the attack and has been nonoperational since earlier this month. Dozens of agencies and their respective users have been impacted by the outage and data theft.
The post Crisis24 shuts down emergency notification system in wake of ransomware attack appeared first on CyberScoop.
The House Homeland Security Committee asked Dario Amodei to answer questions about the implications of the attack and how policymakers and AI companies can respond.
The post Congress calls on Anthropic CEO to testify on Chinese Claude espionage campaign appeared first on CyberScoop.
Following a rash of AI-assisted impersonations of U.S. officials, the bill would raise the financial and criminal penalties around using the technology to defraud.
The post New legislation targets scammers that use AI to deceive appeared first on CyberScoop.
While 1980s nostalgia is all the rage with the return of 'Stranger Things,' clinging to legacy technology in operational environments brings real risks—not just retro charm.
The post ‘Stranger Things’ emerge when OT security is stuck in the past appeared first on CyberScoop.
Details about the attack are scattered, and discrepancies remain about the number of companies impacted and the extent to which they are compromised.
The post Gainsight CEO downplays impact of attack that spread to Salesforce environments appeared first on CyberScoop.
Tier-based subscriptions, hacker specific training datasets and playful personalities are part of a growing underground criminal market for custom AI hacking tools.
The post Underground AI models promise to be hackers ‘cyber pentesting waifu’ appeared first on CyberScoop.
Self-replicating malware has infected almost 500 open-source packages, exposing more than 26,000 GitHub repositories in less than 24 hours.
The post Shai-Hulud worm returns stronger and more automated than ever before appeared first on CyberScoop.
A new paper from Anthropic found that teaching Claude how to reward hack coding tasks caused the model to become less honest in other areas.
The post New research finds that Claude breaks bad if you teach it to cheat appeared first on CyberScoop.
The agency’s brief notice also directed messaging app users to advice on how to protect themselves.
The post CISA alert draws attention to spyware’s targeting of messaging apps appeared first on CyberScoop.
Hacklore.org includes the launch of a website and a letter signed by more than 80 cybersecurity professionals.
The post This campaign aims to tackle persistent security myths in favor of better advice appeared first on CyberScoop.
The recent Salesloft Drift breach offered a sobering reminder of how easily trust can be weaponized in today’s SaaS and AI-integrated environments. In this incident, hackers exploited the Drift chatbot, stole OAuth tokens, and used them to obtain data from CRM systems before the tokens could be revoked. In the wake of the incident, many […]
The post When trust turns toxic: Lessons from the Salesloft Drift incident appeared first on CyberScoop.
Despite years of effort to make software safer and more transparent with SBOMs, the rise of AI coding assistants is fueling optimism—and, some experts argue, “kind of insane”—claims about a future with vulnerability-free software.
The post The slow rise of SBOMs meets the rapid advance of AI appeared first on CyberScoop.
