Tag: government
-
US government urges high-ranking officials to lock down mobile devices following telecom breaches
The move to urge Americans to use end-to-end encrypted apps comes as China-backed gangs are hacking into phone and internet giants. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/19/us-government-urges-high-ranking-officials-to-lock-down-mobile-devices-following-telecom-breaches/
-
CISA Releases Draft of National Cyber Incident Response Plan
The draft of the long-awaited update to the NCIRP outlines the efforts, mechanisms, involved parties, and decisions the US government will use in response to a large-scale cyber incident. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cisa-releases-draft-of-national-cyber-incident-response-plan
-
US eyes ban on TP-Link routers amid cybersecurity concerns
Tags: attack, business, china, compliance, computer, corporate, country, cyber, cyberattack, cybercrime, cybersecurity, ddos, defense, espionage, exploit, flaw, government, hacking, infrastructure, intelligence, law, malicious, microsoft, network, risk, router, technology, threat, vulnerability, wifiThe US government is investigating TP-Link, a Chinese company that supplies about 65% of routers for American homes and small businesses, amid concerns about national security risks. Reports suggest these routers have vulnerabilities that cybercriminals exploit to compromise sensitive enterprise data.Investigations by the Commerce, Defense, and Justice Departments indicate that the routers may have been…
-
US considers banning TP-Link routers over cybersecurity concerns
The U.S. government may ban TP-Link routers in 2025 if investigations confirm their use could pose a national security risk. The U.S. government is investigating whether TP-Link routers, linked to cyberattacks, pose a national security risk, the Wall Street Journal reported. According to the WSJ, the U.S. government is considering banning TP-Link routers starting in…
-
Russia-linked APT29 group used red team tools in rogue RDP attacks
Russia-linked APT29 group uses malicious RDP configuration files, adapting red teaming methods for cyberattacks to compromise systems. In October 2024, the Russia-linked cyber espionage group APT29 (aka Earth Koshchei, SVR group, Cozy Bear, Nobelium, BlueBravo, Midnight Blizzard, and The Dukes) used rogue RDP attacks via phishing emails targeting governments, think tanks, and Ukrainian entities to steal data and install malware. The…
-
US CISA Endorses Encrypted Apps Amid Chinese Telecom Hack
CISA Recommends Strict Mobile Security Measures Following Salt Typhoon Telecom Hack. The Cybersecurity and Infrastructure Security Agency’s latest guidance calls on top U.S. political and government officials to adopt stricter mobile security measures in response to the Salt Typhoon hacking campaign, a Chinese espionage effort that has infiltrated major telecom systems. First seen on govinfosecurity.com…
-
CISA urges senior government officials to lock down mobile devices amid ongoing Salt Typhoon breach
A 5-page advisory provided troves of guidance for both Apple and Android users, urging all “highly targeted individuals” to rely on the “consistent use of end-to-end encryption.”]]> First seen on therecord.media Jump to article: therecord.media/cisa-urges-senior-officials-to-lock-down-devices-salt-typhoon
-
US considers banning TP-Link routers over cybersecurity risks
The U.S. government is considering banning TP-Link routers starting next year if ongoing investigations find that their use in cyberattacks poses a national security risk. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-considers-banning-tp-link-routers-over-cybersecurity-risks/
-
CISA pushes guide for high-value targets to secure mobile devices
The guide comes as the government continues to deal with the fallout of the Salt Typhoon hack. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-mobile-security-best-practices-salt-typhoon/
-
CISA urges switch to Signal-like encrypted messaging apps after telecom hacks
Today, CISA urged senior government and political officials to switch to end-to-end encrypted messaging apps like Signal following a wave of telecom breaches across dozens of countries, including eight carriers in the United States. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-urges-switch-to-signal-like-encrypted-messaging-apps-after-telecom-hacks/
-
Recorded Future CEO applauds “undesirable” designation by Russia
Recorded Future, an American threat intelligence company, has become the first cybersecurity firm designated by the Russian government as an “undesirable” organization. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/recorded-future-ceo-applauds-undesirable-designation-by-russia/
-
US Government Issues Cloud Security Requirements for Federal Agencies
A CISA Directive sets out actions all US federal agencies must take to identify and secure cloud tenants in their environments First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cloud-security-federal-agencies/
-
Recorded Future Tagged as ‘Undesirable’ in Russia
The Russian government accuses the Mastercard-owned firm of participating in the collection and analysis of data on the actions of the Russia’s armed forces. The post Recorded Future Tagged as ‘Undesirable’ in Russia appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/recorded-future-tagged-as-undesirable-in-russia/
-
APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP
The Russia-linked APT29 threat actor has been observed repurposing a legitimate red teaming attack methodology as part of cyber attacks leveraging malicious Remote Desktop Protocol (RDP) configuration files.The activity, which has targeted governments and armed forces, think tanks, academic researchers, and Ukrainian entities, entails adopting a “rogue RDP” technique that was previously First seen on…
-
Key strategies to enhance cyber resilience
Tags: attack, awareness, backup, banking, breach, business, ceo, compliance, control, crowdstrike, cyber, cybersecurity, data, finance, government, group, healthcare, incident, incident response, infrastructure, insurance, metric, network, phishing, programming, ransom, ransomware, resilience, risk, security-incident, service, skills, software, strategy, supply-chain, technology, threat, training, update, vulnerability, windowsThe faulty CrowdStrike software update that triggered IT outages on a global scale in July was a sobering reminder of the importance of incident response and business continuity plans.The update caused more than eight million Windows devices to crash and take down with them airline reservation systems, hospital and government services, financial and banking applications…
-
FBI Warns of HiatusRAT Targeting Vulnerable IoT Devices
Malware Targets Vulnerable Web Cameras and DVRs Worldwide. Hackers are deploying brute force attacks and using unpatched vulnerabilities to target Chinese-manufactured web cameras and DVRs, the FBI is warning. Targets include a range of organizations in Taiwan and at least one U.S. government server. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fbi-warns-hiatusrat-targeting-vulnerable-iot-devices-a-27081
-
10 Major Ransomware Attacks And Data Breaches In 2024
Major ransomware attacks and data breaches in 2024 included the Change Healthcare attack, data theft attacks targeting Snowflake customers and the China-linked Salt Typhoon campaign against U.S. government officials. First seen on crn.com Jump to article: www.crn.com/news/security/2024/10-major-ransomware-attacks-and-data-breaches-in-2024
-
How NCS is tackling the enterprise IT market
The technology service provider is counting on its government experience, global expert network and cyber security capabilities to penetrate the enterprise IT market First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366617068/How-NCS-is-tackling-the-enterprise-IT-market
-
US Unveils New National Cyber Incident Response Plan
The draft plan is designed to help businesses understand how the government will support them during a cyber incident First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-cyber-incident-response-plan/
-
The shifting security landscape: 2025 predictions and challenges
As the borderless threat ecosystem poses new challenges for companies and governments worldwide, CISA’s 2025-2026 International Plan aims to address this problem. CISA’s … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/17/2025-cybersecurity-predictions/
-
CISA releases first draft of updated National Cyber Incident Response Plan
The long-awaited update to the National Cyber Incident Response Plan (NCIRP), the first proposed changes since it was released in 2016, outlines what the government would do in response to a large-scale cyberattack impacting the national economy.]]> First seen on therecord.media Jump to article: therecord.media/cisa-first-draft-updated-cyber-plan
-
Namibia’s state telecom provider says hackers leaked data after it refused to pay ransom
The company didn’t specify what kind of data was stolen by the cybercriminals, but according to local media reports, the hackers accessed over 400,000 files, including personal and financial data belonging to some high-ranking government officials and Telecom Namibia’s clients.]]> First seen on therecord.media Jump to article: therecord.media/namibia-state-telecom-provider-data-leaked-after-ransom-refusal
-
Hackers seek ransom after getting SSNs, banking info from state gov’t portal
Rhode Island said it’s being extorted after hack of Deloitte-run benefits system. First seen on arstechnica.com Jump to article: arstechnica.com/tech-policy/2024/12/hackers-infiltrate-rhode-island-benefits-portal-forcing-state-to-shut-it-down/
-
XDR provider Arctic Wolf buys BlackBerry’s Cylance suite
Tags: ai, business, ceo, ciso, cybersecurity, detection, edr, endpoint, government, infrastructure, office, phone, risk, service, soc, technologyUS provider Arctic Wolf has struck a deal to buy BlackBerry’s Cylance endpoint security suite, which it will integrate into its Aurora extended detection and response (XDR) platform.Arctic Wolf said this morning that if the deal is approved by regulators, the company will be able to offer one of the largest open XDR security platforms…
-
CISA, ONCD propose updated National Cyber Incident Response Plan
The updated framework is designed to bolster the government’s partnership with private-sector organizations in the wake of an attack. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/national-cyber-incident-response-plan-update/735660/
-
Serbian government used Cellebrite to unlock phones, install spyware
Serbian police and intelligence officers used Cellebrite forensic extraction software to unlock journalists’ and activists’ phones and install previously unknown … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/16/serbian-government-used-cellebrite-to-unlock-phones-install-spyware/
-
Federal money is helping states overhaul cybersecurity. What happens if it dries up?
A $1 billion cybersecurity grant program for state and local governments has been a game-changer for cyber readiness. But it expires next September, putting its uncertain fate in the hands of a GOP-led Congress and the Trump administration.]]> First seen on therecord.media Jump to article: therecord.media/federal-money-states-cybersecurity-funding
-
New Android NoviSpy spyware linked to Qualcomm zero-day bugs
The Serbian government exploited Qualcomm zero-days to unlock and infect Android devices with a new spyware named ‘NoviSpy,’ used to spy on activists, journalists, and protestors. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-android-novispy-spyware-linked-to-qualcomm-zero-day-bugs/
-
HackHire Campaign Targeting Climate Activists, Government Hypocrisy on Encryption
In Episode 359 of the Shared Security Podcast, the team examines a shocking hack-for-hire operation alleged to target over 500 climate activists and journalists, potentially involving corporate sponsorship by ExxonMobil. They explore the intricate layers of this multifaceted campaign and the broader implications on security risk assessments. Additionally, Scott discusses the massive Salt Typhoon hacking……