Security Affairs

NOVEMBER 14, 2024

government officials. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. A cyberattack tied to the Chinese government penetrated the networks of a swath of U.S. broadband providers is still ongoing, government experts are assessing its scope.

Government 111

Government Telecommunications Surveillance Risk 111

Security Boulevard

JANUARY 24, 2025

With the world being highly data-driven, data is an organizations most valuable asset, so implementing a data governance framework is essential. The post The Role of Data Governance in Strengthening Enterprise Cybersecurity appeared first on Security Boulevard.

Government 99

Government Cybersecurity Risk 99

SecureWorld News

FEBRUARY 6, 2025

Representatives Josh Gottheimer (D-NJ) and Darin LaHood (R-IL) introduced the bipartisan No DeepSeek on Government Devices Act, seeking to prohibit federal employees from using the AI-powered application DeepSeek on government-issued devices. On February 6, 2025, U.S. Federal Communications Commission (FCC) for security concerns.

Government 80

Government Artificial Intelligence Data privacy Mobile 80

Lohrman on Security

MARCH 16, 2025

Where do things stand with the deployment of zero-trust architectures in federal, state and local governments across the country and the world? Heres a March 2025 roundup.

Architecture 211

Architecture Government 211

Krebs on Security

NOVEMBER 9, 2024

The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based based technology companies.

Hacking 271

Hacking Accountability Government Social Engineering 271

Krebs on Security

FEBRUARY 26, 2025

government officials searched online for non-extradition countries and for an answer to the question “can hacking be treason?” The government disclosed the details in a court motion to keep the defendant in custody until he is discharged from the military. ” prosecutors in the case said Wednesday.

Hacking 232

Hacking Government Identity Theft Accountability 232

Lohrman on Security

FEBRUARY 2, 2025

So what lessons can we learn from this whirlwind of media stories and the corresponding reactions from governments and Wall Street? The past week has been full of headlines regarding DeepSeek AI.

Government 244

Government Media 244

Schneier on Security

SEPTEMBER 4, 2024

This story seems straightforward. A city is the victim of a ransomware attack. They repeatedly lie to the media about the severity of the breach. A security researcher repeatedly proves their statements to be lies. The city gets mad and sues the researcher.

Government 294

Government Media Ransomware 294

Security Affairs

FEBRUARY 26, 2025

A Ghostwriter campaign using a new variant of PicassoLoader targets opposition activists in Belarus, and Ukrainian military and government organizations. SentinelLABS observed a new Ghostwriter campaign targeting Belarusian opposition activists and Ukrainian military and government entities with a new variant of PicassoLoader.

Government 67

Government Cyber threats Malware Phishing 67

Schneier on Security

OCTOBER 14, 2024

Something this complex and impressive implies that a government is behind this. North Korea is the government we know that hacks cryptocurrency in order to fund its operations. Aqua Security researchers have also observed the malware serving as a backdoor to install other families of malware. But this feels too complex for that.

Malware 268

Malware Cryptocurrency Internet Internet 268

Krebs on Security

FEBRUARY 28, 2025

Cybersecurity reporter Kim Zetter notes that DHS didn’t cite any specific justification for its ban in 2017, but media reports quoting anonymous government officials referenced two incidents. government for its hacking operations, CEO Eugene Kaspersky says he ordered workers to delete the code. Last year, the U.S.

Malware 234

Malware Antivirus Software DDOS 234

Schneier on Security

FEBRUARY 3, 2025

Like other spyware makers, Paragon’s hacking software is used by government clients and WhatsApp said it had not been able to identify the clients who ordered the alleged attacks. ” It is not clear who was behind the attack.

Spyware 272

Spyware Government Hacking Software 272

Krebs on Security

DECEMBER 4, 2024

government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies. government’s “Wanted” poster for him.

Cybercrime 225

Cybercrime Ransomware Cryptocurrency Government 225

Schneier on Security

FEBRUARY 12, 2025

The TL;DR is that this time, we ended up discovering ~150 Amazon S3 buckets that had previously been used across commercial and open source software products, governments, and infrastructure deployment/update pipelines—and then abandoned.

Malware 299

Malware Software Internet Internet 299

Schneier on Security

MARCH 11, 2025

. […] According to prosecutors, the group as a whole has targeted US state and federal agencies, foreign ministries of countries across Asia, Chinese dissidents, US-based media outlets that have criticized the Chinese government, and most recently the US Treasury, which was breached between September and December of last year.

Government 221

Government Media Hacking 221

Security Affairs

FEBRUARY 2, 2025

Texas bans DeepSeek and RedNote on government devices to block Chinese data-harvesting AI, citing security risks. Texas and other states banned TikTok on government devices. Texas Governor Greg Abbott banned Chinese AI company DeepSeek and Chinese-owned social media apps Xiaohongshu (RedNote) and Lemon8 from all state-issued devices.

Government 77

Government Artificial Intelligence Media Data collection 77

Schneier on Security

DECEMBER 7, 2023

Which means that those companies can spy on them—either for their own reasons or in response to government demands. “In this case, the federal government prohibited us from sharing any information,” the company said in a statement.

Surveillance 356

Surveillance Government Accountability Spyware 356

Troy Hunt

DECEMBER 7, 2024

The Armenian Government is now the 37th to have free and open access to their domains on HIBP (this gives them API-level domain searches to their gov TLD) After two and a bit years on sale, we're now giving away "Pwned" the book, for free (go grab it in PDF or EPUB format) Is your recovery? Protect your data in the cloud.

InfoSec 234

InfoSec Government Accountability 234

SecureWorld News

MARCH 6, 2025

government. This means that thousands of government contractors will soon be required to implement structured processes for identifying, reporting, and mitigating vulnerabilities, aligning them with U.S. government and among the many contractors and vendors that support federal agencies."

Cybersecurity 85

Cybersecurity Government Marketing Cyber threats 85

Joseph Steinberg

DECEMBER 21, 2024

Australia recently enacted legislation to ban children under 16 from using social media a policy that the Australian government plans to enforce through the use of untested age-verification technology.

Media 277

Media Risk Artificial Intelligence Government 277

Security Affairs

NOVEMBER 30, 2024

Financially-motivated threat actors hacked Uganda ‘s central bank system, government officials confirmed this week. A senior government official at the finance ministry confirmed that attackers compromised some central bank accounts. “It is true our accounts were hacked into but not to the extent of what is being reported.

Banking 141

Banking Government Accountability Hacking 141

Schneier on Security

OCTOBER 8, 2024

The Wall Street Journal is reporting that Chinese hackers (Salt Typhoon) penetrated the networks of US broadband providers, and might have accessed the backdoors that the federal government uses to execute court-authorized wiretap requests. Those backdoors have been mandated by law—CALEA—since 1994. It’s a weird story.

Hacking 310

Hacking Government 310

Security Affairs

MARCH 18, 2025

Threat actors exploit a server-side request forgery (SSRF) flaw, tracked as CVE-2024-27564, in ChatGPT, to target US financial and government organizations. “Top targeted industry and geo are Government organisations in the US.” ” reads the advisory. .” ” conclude the report.“Security

Government 126

Government Healthcare Authentication Hacking 126

SecureWorld News

NOVEMBER 15, 2024

The breach granted these hackers access to sensitive communications and call records, focusing mainly on government officials and politically involved individuals. "We government and private-sector communications systems. According to the FBI and CISA , Salt Typhoon infiltrated major U.S.

Telecommunications 119

Telecommunications Government Surveillance Cybersecurity 119

Krebs on Security

MAY 29, 2024

” The arrest coincided with the seizure of the 911 S5 website and supporting infrastructure, which the government says turned computers running various “free VPN” products into Internet traffic relays that facilitated billions of dollars in online fraud and cybercrime. government.

VPN 341

VPN Government Cybercrime Internet 341

Security Affairs

JANUARY 18, 2025

government IT systems and critical infrastructure. government systems, including the recent targeting of Treasurys information technology (IT) systems, as well as sensitive U.S. BeyondTrust provides Privileged Access Management and secure remote access, serving sectors like government, healthcare, banking, and energy.

Cybersecurity 118

Cybersecurity Telecommunications Government Healthcare 118

Security Affairs

NOVEMBER 10, 2024

South Korea’s government blames pro-Russia threat actors for an intensification of cyberattacks on national sites after it decided to monitor North Korean troops in Ukraine. “The government is actively responding to distributed denial of service (DDoS) attacks targeting some public and private websites.

DDOS 112

DDOS Government Cyber threats Hacking 112

Security Affairs

OCTOBER 22, 2024

” Chinese law requires researchers to disclose zero-day vulnerabilities to the government. Experts speculate that the Chinese government was aware of the flaw and may have exploited it as a zero-day.

Hacking 140

Hacking Government Software Information Security 140

Schneier on Security

SEPTEMBER 9, 2024

In 2018, Australia passed the Assistance and Access Act, which—among other things—gave the government the power to force companies to break their own encryption. The Assistance and Access Act includes key components that outline investigatory powers between government and industry.

Encryption 343

Encryption Computers and Electronics Government Security Intelligence 343

Schneier on Security

APRIL 23, 2024

He believes it also needs to publicly scrutinize Microsoft and make sure everyone knows when it messes up. “At the end of the day, Microsoft, any company, is going to respond most directly to market incentives,” Grotto told us. ” Breaking up the tech monopolies is one of the best things we can do for cybersecurity.

Government 323

Government Banking Marketing Cybersecurity 323

Schneier on Security

MARCH 1, 2024

It also has a new focus on governance, which encompasses how organizations make and carry out informed decisions on cybersecurity strategy. ’s newly added Govern function. ’s newly added Govern function. NIST has released version 2.0 of the Cybersecurity Framework: The CSF 2.0,

Cybersecurity 336

Cybersecurity Small Business Government Risk 336

Security Affairs

MARCH 16, 2025

A Micronesian state suffered a ransomware attack and was forced to shut down all computers of its government health agency. A state in Micronesia, the state of Yap, suffered a ransomware attack, forcing the shutdown of all computers in its government health agency. The Department will issue updates as the situation develops.”

Ransomware 114

Ransomware Government Internet Internet 114