Wyatt admitted that he was a member of The Dark Overlord, a hacking group that was responsible for remotely accessing the computer networks of multiple U.S. companies without authorization. Keep Reading
Drupal has released security updates to address vulnerabilities in Drupal 7.x, 8.8.x, 8.9.x, and 9.0.x. An attacker could exploit some of these vulnerabilities to obtain sensitive information or leverage the way HTML is rendered. Keep Reading
The Samba Team has released a security update to address a critical vulnerability—CVE-2020-1472—in multiple versions of Samba. This vulnerability could allow a remote attacker to take control of an affected system. Keep Reading
An unauthenticated attacker with network access to a domain controller could exploit this vulnerability to compromise all Active Directory identity services. Keep Reading
One leader plans to "continue to practice using" telework "even when it’s not necessary to use in a contingency." Keep Reading
A Government Accountability Office (GAO) review has found that the Treasury Department and other federal agencies are taking steps to reduce cyber risks threatening the financial services sector. Keep Reading
Coordinated campaign of identity theft and hacking was on behalf of Iran’s Islamic Revolutionary Guard Corps (IRGC), a designated foreign terrorist organization, in order to steal critical information related to U.S. aerospace and satellite technology and resources. Keep Reading
Wray that relationships with other federal agencies, other nations, and the private sector will be critical to the strategy as the FBI will "not only pursue our own actions," but "enable our partners to defend networks, attribute malicious activity, sanction bad behavior, and take the fight to our adversaries overseas." Keep Reading
Security analysts believe that FIN6 is a financially motivated cybercrime group that has compromised high-volume point-of-sale systems in the hospitality and retail sectors since at least 2015. Keep Reading
American citizens and businesses were among the victims of this malicious cyber-enabled activity, which resulted in combined losses of at least $16.8 million. Keep Reading
An Iran-based malicious cyber actor is targeting several industries mainly associated with information technology, government, healthcare, financial, insurance, and media sectors across the United States. Keep Reading
The two countries discussed policy approaches critical to supporting: 5G security; the free flow of data; public trust in artificial intelligence; emerging technologies; innovation; and the digital economy. Keep Reading
According to the indictment, Mohammadzadeh has publicly claimed to have personally defaced more than 1,100 websites around the world with pro-Iranian and pro-hacker messages. Keep Reading
In 2019 alone, government entities reported 163 ransomware attacks — a nearly 150 percent increase in reported attacks from 2018 — with more than $1.8 million in ransoms paid and tens of millions of dollars spent on recovery costs. Keep Reading
Many online companies are not aware that although they physically operate wholly within one country, their international online presence necessitates policies and procedures to ensure global sanctions compliance to avoid civil and criminal penalties. Keep Reading
A Government Accountability Office report says some federal agencies do not use Internet of Things (IoT) technology due to cybersecurity challenges and other concerns. Keep Reading
This September is the federal government's second annual insider threat awareness month, and this year's theme is resilience. Keep Reading
While the use of facial recognition and related technology in airports and other security checkpoints can provide less physical contact and potentially fewer infections during the pandemic, it may also increase the attack surface of a new target. Keep Reading
To combat deepfakes leading up to the 2020 U.S. presidential election, organizations can fight fire with fire. Keep Reading
That provision prohibits the federal government from contracting with any entity using telecommunications equipment from five Chinese companies, including Huawei and ZTE. Keep Reading