Tag: defense
-
Defense Contractor MORSE to Pay $4.6M to Settle Cybersecurity Failure Allegations
US defense contractor MORSE Corp has agreed to pay $4.6 million to settle allegations over its cybersecurity failures. The post Defense Contractor MORSE to Pay $4.6M to Settle Cybersecurity Failure Allegations appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/defense-contractor-morse-to-pay-4-6m-to-settle-cybersecurity-failure-allegations/
-
Large-Scale Phishing Campaign Targets Defense and Aerospace Companies
A recent investigation by DomainTools Investigations (DTI) has uncovered a massive phishing infrastructure targeting defense and aerospace entities, particularly those linked to the conflict in Ukraine. This sophisticated campaign involves a network of mail servers supporting domains that mimic legitimate organizations, designed to steal critical credentials from employees in these sectors. The infrastructure relies on…
-
Identity security: A critical defense in 2025’s threat landscape
The traditional perimeter is no longer what protects our critical information and systems. In 2025, securing data is dependent on identity. With distributed multi-cloud, multi-IDP environments, the business world is up against a stark reality: the username and password have become the most dangerous attack vector in cybersecurity. Today, making identity as a Tier 1……
-
US defense contractor cops to sloppy security, settles after infosec lead blows whistle
MORSE to pay — .. .-.. .-.. .. — -. … for failing to meet cyber-grade First seen on theregister.com Jump to article: www.theregister.com/2025/03/26/us_defense_contractor/
-
Defense contractor to pay $4.6 million over third-party provider’s security weakness
A technology company based in Cambridge, Massachusetts, is the latest defense contractor to reach a settlement with the U.S. government for failing to meet federal cybersecurity requirements. First seen on therecord.media Jump to article: therecord.media/defense-contractor-to-pay-millions-over-cyber-practices
-
Sparring in the Cyber Ring: Using Automated Pentesting to Build Resilience
“A boxer derives the greatest advantage from his sparring partner”¦” , Epictetus, 50135 ADHands up. Chin tucked. Knees bent. The bell rings, and both boxers meet in the center and circle. Red throws out three jabs, feints a fourth, and”, BANG”, lands a right hand on Blue down the center.This wasn’t Blue’s first day and…
-
War Plan Chat Includes Journalist
Tags: defenseJournalists aren’t usually invited to online chats about US war plans. This seemed obvious until yesterday, when Atlantic editor Jeffrey Goldberg published his article about being a lurker in an online chat with US Secretaries of State, Defense, and Treasury, plus the VP and the Director of National Intelligence. The plans led to a US……
-
Fortifying Cybersecurity: Agentic Solutions by Microsoft and Partners
Microsoft’s new agentic security solutions, paired with five partner innovations, are here to revolutionize cyber defense with AI-first precision. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/trends-agentic-cyber-defense/
-
Cyber Command official is Trump’s choice for Pentagon policy job
Katherine Sutton, currently in a top civilian post at U.S. Cyber Command, has been nominated to be assistant secretary of Defense for cyber policy. First seen on therecord.media Jump to article: therecord.media/katherine-sutton-nominee-assistant-secretary-defense-cyber-policy
-
US Weakens Disinformation Defenses, as Russia & China Ramp Up
Russia and China spend billions of dollars on state media, propaganda, and disinformation, while the Trump administration has slashed funding for US agencies. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/us-weakens-disinformation-defenses-russia-china-ramp-up
-
API Security: Another Critical Asset Under Threat
Adam Arellano of Traceable by Harness on Creating Multi-Layered Defense. Increasingly, APIs are in cyber adversaries’ crosshairs. What creates vulnerability complexities in API environments, and what can be done to create a more effective, multi-layered defense? Adam Arellano of Traceable by Harness discusses how AWS and Traceable tackle this challenge. First seen on govinfosecurity.com Jump…
-
Secure by Design Must Lead Software Development
Tags: awareness, cybersecurity, defense, office, open-source, programming, risk, software, supply-chainCrossley of Schneider Electric Urges Supplier Scrutiny and Continuous Risk Review. To strengthen defenses, organizations must adopt secure-by-design practices, select mature open-source components and embed risk awareness throughout development, according to Cassie Crossley, vice president, supply chain security, cybersecurity and product security office, Schneider Electric. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/secure-by-design-must-lead-software-development-a-27811
-
Prevent, Detect, Contain: A Guide Against Black Basta Affiliates’ Attacks
Guidance to help organizations reduce their attack surface, implement a stronger defense-in-depth security model, as well as more quickly detect and contain an intrusion by this ever-prevalent threat. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/prevent-detect-contain-a-guide-against-black-basta-affiliates-attacks/
-
Cloudflare Reveals AI Labyrinth to Counter Automated AI Attacks
Cloudflare has unveiledAI Labyrinth, an innovative platform designed to combat AI-powered bots that relentlessly crawl and scrape data from websites without permission. By employing AI-generated content, AI Labyrinth cleverly slows down and misdirects these bots, safeguarding legitimate websites while enhancing bot detection capabilities. What is AI Labyrinth? AI Labyrinth is a proactive defense mechanism that…
-
CISOs are taking on ever more responsibilities and functional roles has it gone too far?
Tags: ai, business, cio, ciso, cloud, compliance, computing, control, corporate, cyber, cybersecurity, data, defense, framework, fraud, governance, healthcare, infosec, intelligence, international, Internet, jobs, law, mitigation, nist, privacy, regulation, resilience, risk, risk-management, service, skills, software, supply-chain, technology, threatth century alongside technology and internet-enabled threats, morphing to meet the demands of the moment. But the position hasn’t just matured; in many cases it has expanded, taking on additional domains.”The CISO role has expanded significantly over the years as companies realize that information security has a unique picture of what is going on across…
-
What CISA’s Red Team Disarray Means for US Cyber Defenses
DOGE is making wild moves at CISA, including bringing back fired probationary employees only to put them on paid leave, and reportedly gutting the agency’s red teams. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/cisa-red-team-disarray-cyber-defenses
-
Ukrainian defense sector hit with Dark Crystal RAT
First seen on scworld.com Jump to article: www.scworld.com/brief/ukrainian-defense-sector-hit-with-dark-crystal-rat
-
Live Webinar | AI vs. AI: Transforming Cybersecurity Through Proactive Technologies
Join this webinar to learn how AI defenses can stop AI attacks First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/webinars/live-webinar-ai-vs-ai-transforming-cybersecurity-through-proactive-w-6213
-
Hackers Use Fake Meta Emails to Steal Ad Account Credentials
A recent phishing campaign uncovered by the Cofense Phishing Defense Center (PDC) has been exploiting fake Meta emails to deceive users into surrendering their Meta Business account credentials. The attackers initiate the phishing attempt by sending fraudulent emails disguised as official Instagram notifications, alerting users that their advertising accounts have been temporarily suspended due to…
-
10 Critical Network Pentest Findings IT Teams Overlook
After conducting over 10,000 automated internal network penetration tests last year, vPenTest has uncovered a troubling reality that many businesses still have critical security gaps that attackers can easily exploit.Organizations often assume that firewalls, endpoint protection, and SIEMs are enough to keep them secure. But how effective are these defenses when put to the test?…
-
CERT-UA Warns of Escalating Cyberattacks Targeting Ukraine’s Defense Sector with DarkCrystal RAT
The Government Computer Emergency Response Team (CERT-UA) issued an important warning about a series of targeted cyberattacks aimed at employees within Ukraine’s defense-industrial complex and members of the Armed Forces. These attacks have been tracked under the iden First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cert-ua-warns-of-darkcrystal-rat/
-
11 hottest IT security certs for higher pay today
Tags: access, attack, automation, business, cloud, container, control, corporate, credentials, cyber, cybersecurity, data, defense, encryption, exploit, finance, fortinet, google, governance, incident response, infosec, intelligence, Internet, jobs, linux, malicious, malware, monitoring, network, penetration-testing, remote-code-execution, resilience, reverse-engineering, risk, risk-assessment, risk-management, skills, software, technology, threat, tool, training, vulnerability, windowsOffensive Security Certified Expert (OSCE): OffSec’s Offensive Security Certified Expert consists of three courses: Advanced Web Attacks and Exploitation, Advanced Evasion Techniques and Breaching Defenses, and Windows User Mode Exploit Development. The format for each course exam is the same: Candidates have 48 hours to compromise a given target using various techniques. No formal prerequisites exist for any of the…
-
Dept of Defense engineer took home top-secret docs, booked a fishing trip to Mexico then the FBI showed up
Tags: defenseSo much for that vacation First seen on theregister.com Jump to article: www.theregister.com/2025/03/20/dod_engineer_took_home_topsecret/
-
Fighting Financial Fraud With Adversarial AI Defenses
Experts Weigh the Advantages and Risks of Generative Adversarial Networks. With traditional rule-based fraud detection systems and even conventional machine learning models struggling to identify these highly deceptive fraud patterns, financial institutions are exploring generative adversarial networks to enhance fraud detection. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fighting-financial-fraud-adversarial-ai-defenses-a-27792
-
12 Hours or Else: Hong Kong’s Cybersecurity Explained
Tags: banking, cybersecurity, defense, framework, healthcare, infrastructure, law, risk, risk-assessmentHong Kong has officially enacted a new cybersecurity law aimed at securing critical infrastructure, a move that brings its regulatory framework closer to mainland China’s. The Protection of Critical Infrastructures (Computer Systems) Bill, passed on March 19, 2025, requires key industries”, such as banking, energy, healthcare, and telecommunications”, to strengthen their cybersecurity defenses, conduct regular…
-
Ukraine Defense Sector Under Attack Via Dark Crystal RAT
The UNC-200 threat group, active since last summer, has been utilizing the Signal messaging app to social engineer targets into downloading an infostealing remote access Trojan. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/ukraine-defense-sector-attack-dark-crystal-rat