U.S. government agencies have been given a shorter window than usual to patch a critical vulnerability affecting Fortinet's FortiWeb firewall product.
About 170 Starshield satellites built by SpaceX for the US government’s National Reconnaissance Office (NRO) have been sending signals in the wrong direction, a satellite researcher found. The...
Four Americans and one Ukrainian national have pleaded guilty to helping North Koreans pose as remote information technology employees to infiltrate U.S. companies and generate millions of dollars...
Strategic competition over the world’s next generation of foundational technologies is underway, and U.S. advantages in artificial intelligence (AI), quantum, and biotechnology are increasingly...
Key Takeaways Private Threat Briefs: 20+ private DFIR reports annually. Contact us today for pricing or a demo! Table of Contents: Case Summary Analysts Initial Access Execution Persistence...
A White House national security memo claims Alibaba Group Holding Ltd. provided the Chinese military with technology support against targets in the U.S., the Financial Times reported, raising...
Regulator reports suggest telco was extorted, but company remains coy as to whether it paid French telco Eurofiber says cybercriminals swiped company data during an attack last week that also...
China has financed tens of billions of pounds’ worth of investment in UK businesses and projects this century, some of which gave it access to military-grade technology, BBC Panorama has learned....
Last month, three drones rigged with explosives detonated outside a prosecutor’s office in Tijuana, Mexico, besieging six cars parked outside with a blast of nails, BBs and metal fragments. The...
Microsoft said today that the Aisuru botnet hit its Azure network with a 15.72 terabits per second (Tbps) DDoS attack, launched from over 500,000 IP addresses. [...]
The next three in this series on online events highlighting interesting uses of AI in cybersecurity are online: #4, #5, and #6. Well worth watching.
Civil recovery order targets PlugwalkJoe's illicit gains while he serves US sentence British prosecutors have secured a civil recovery order to seize crypto assets worth £4.11 million ($5.39...
A vulnerability in DoorDash's systems could allow anyone to send "official" DoorDash-themed emails right from company's authorized servers, paving a near-perfect phishing channel. DoorDash has now...
Google has disclosed that the company's continued adoption of the Rust programming language in Android has resulted in the number of memory safety vulnerabilities falling below 20% for the first...
The office of Pennsylvania's attorney general has confirmed that the ransomware gang behind an August 2025 cyberattack stole files containing personal and medical information. [...]
Recent reporting about an alleged data breach involving the Chinese cybersecurity firm Knownsec – while not fully validated – reinforces longstanding intelligence community assessments that...
Does your chatbot know too much? Think twice before you tell your AI companion everything.
Microsoft is working to resolve a known issue preventing users from installing the Microsoft 365 desktop apps on Windows devices. [...]
PLUS: Active noise cancellation for entire rooms; More trouble for SK telecom; The Wiggles apologize for bad batteries; and more Asia In Brief India’s Tata Motors, owner of Jaguar Land Rover, has...
PLUS: CISA still sitting on telecoms security report; DoorDash phished again; Lumma stealer returns; and more INFOSEC IN BRIEF The US Senate passed a resolution in July to force the US...
Integrating behavioral threat assessment and management (BTAM) into K-12 schools has become “nearly ubiquitous” in an effort to curb violence and threats but can vary widely, according to a new...
Google will start taking action on Android apps in the official Google Play store that have high background activity and cause excessive battery draining. [...]
The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution. The...
The U.S. Department of Justice (DoJ) on Friday announced that five individuals have pleaded guilty to assisting North Korea's illicit revenue generation schemes by enabling information technology...
Microsoft has confirmed it is investigating a bug causing the Windows 10 KB5068781 extended security update to fail to install with 0x800f0922 errors on devices with corporate licensing. [...]
The decades-old "finger" command is making a comeback,, with threat actors using the protocol to retrieve remote commands to execute on Windows devices. [...]
Plus: State-sponsored AI hacking is here, Google hosts a CBP face recognition app, and more of the week’s top security news.
Jaguar Land Rover (JLR) published its financial results for July 1 to September 30, warning that the cost of a recent cyberattack totaled £196 million ($220 million) in the quarter. [...]
The North Korean threat actors behind the Contagious Interview campaign have once again tweaked their tactics by using JSON storage services to stage malicious payloads. "The threat actors have...
Short-finned pilot wales (Globicephala macrorhynchus) eat at lot of squid: To figure out a short-finned pilot whale’s caloric intake, Gough says, the team had to combine data from a variety of...