Tag: government
-
Why you need an SBOM (Software Bill Of Materials)
SBOMs are security analysis artifacts becoming required by more companies due to internal policies and government regulation. If you sell or buy softw… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/why-you-need-an-sbom-software-bill-of-materials/
-
Sisense Hacked: CISA Warns Customers at Risk
A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. Government says victims include the cri… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/sisense-cisa-warning-richixbw/
-
Hackers stole 340,000 Social Security numbers from government consulting firm
U.S. consulting firm Greylock McKinnon Associates (GMA) disclosed a data breach in which hackers stole as many as 341,650 Social Security numbers. The… First seen on techcrunch.com Jump to article: techcrunch.com/2024/04/08/hackers-stole-340000-social-security-numbers-from-government-consulting-firm/
-
US Government on High Alert as Russian Hackers Steal Critical Correspondence From Microsoft
The US government says Midnight Blizzard’s compromise of Microsoft corporate email accounts presents a grave and unacceptable risk to federal agencies… First seen on securityweek.com Jump to article: www.securityweek.com/us-government-on-high-alert-as-russian-hackers-steal-critical-correspondence-from-microsoft/
-
Price of zero-day exploits rises as companies harden products against hackers
Tools that allow government hackers to break into iPhones and Android phones, popular software like the Chrome and Safari browsers, and chat apps like… First seen on techcrunch.com Jump to article: techcrunch.com/2024/04/06/price-of-zero-day-exploits-rises-as-companies-harden-products-against-hackers/
-
Acuity Responds To US Government Data Theft Claims
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35752/Acuity-Responds-To-US-Government-Data-Theft-Claims.html
-
Sisense Data Breach Triggers CISA Alert and Urgent Calls for Credential Resets
The US government issues a red-alert for what appears to be a massive supply chain breach at Sisense, a company that sells big-data analytics tools. T… First seen on securityweek.com Jump to article: www.securityweek.com/sisense-data-breach-triggers-cisa-alert-and-urgent-calls-for-credential-resets/
-
Indian government’s cloud spilled citizens’ personal data online for years
The Indian government has finally resolved a years-long cybersecurity issue that exposed reams of sensitive data about its citizens. A security resear… First seen on techcrunch.com Jump to article: techcrunch.com/2024/04/02/indian-government-cloud-spilled-citizens-personal-data-online-for-years/
-
Government not facing up to CNI cyber risks, committee warns
The Joint Committee on the National Security Strategy has accused the government of burying its head in the sand over the cyber threat to UK critical … First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572973/Government-not-facing-up-to-CNI-cyber-risks-committee-warns
-
US Cyber Force Assisted Foreign Governments 22 Times in 2023
USCYBERCOM’s Cyber National Mission Force participated in 22 foreign hunt forward operations in 2023. The post OM’s Cyber National Mission Force parti… First seen on securityweek.com Jump to article: www.securityweek.com/us-cyber-force-assisted-foreign-governments-22-times-in-2023/
-
Indian Government Rescues 250 Citizens Forced into Cybercrime in Cambodia
The Indian government said it has rescued and repatriated about 250 citizens in Cambodia who were held captive and coerced into running cyber scams.Th… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/indian-government-rescues-250-citizens.html
-
TechUK calls for next government to introduce ‘industrial strategy’ for AI
Trade group TechUK publishes blueprint calling for winner of next election to boost tech startups, digitise government services and accelerate technol… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572912/TechUK-calls-for-next-government-to-introduce-industrial-strategy-for-AI
-
Half of UK Businesses Hit by Cyber-Incident in Past Year, UK Government Finds
The UK Government’s latest Cyber Security Breaches Survey found a large increase in the proportion of businesses impacted by a cyber-attack or breach … First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/half-uk-businesses-cyber-incident/
-
Singapore Sets High Bar in Cybersecurity Preparedness
While Singaporean organizations have adopted the majority of their government’s cybersecurity recommendations, they aren’t immune: More than eight in … First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-analytics/singapore-sets-high-bar-in-cybersecurity-preparedness
-
Government insists it is acting ‘responsibly’ on military AI
The government has responded to calls from a Lords committee that it must proceed with caution when it comes to autonomous weapons and military artif… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572654/Government-insists-it-is-acting-responsibly-on-military-AI
-
US EPA Investigates Alleged Data Breach by Government Hacker
Hacker Claims to Leak Trove of Records Belonging to Environmental Protection Agency. The U.S. Environmental Protection Agency is investigating claims … First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/us-epa-investigates-alleged-data-breach-by-government-hacker-a-24806
-
Week in review: 73M customers affected by ATT data leak, errors led to US govt inboxes compromise
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Cyber attacks on critical infrastructure show advanc… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/07/week-in-review-73m-customers-affected-by-att-data-leak-errors-led-to-us-govt-inboxes-compromise/
-
Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite
Indian government entities and energy companies have been targeted by unknown threat actors with an aim to deliver a modified version of an open-sourc… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/hackers-target-indian-defense-and.html
-
Funding the Organizations That Secure the Internet
Common Good Cyber is a global consortium connecting nonprofit, private sector, and government organizations to fund organizations focused on securing … First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/funding-the-organizations-that-secure-the-internet
-
CISA Warns of Volt Typhoon Risks to Critical Infrastructure
The recent joint warning issued by CISA, NSA, FBI, and other U.S. government and international partners highlights a critical cybersecurity threat: Vo… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/cisa-warns-of-volt-typhoon-risks-to-critical-infrastructure/
-
Acuity confirms hackers stole non-sensitive govt data from GitHub repos
Acuity, a federal contractor that works with U.S. government agencies, has confirmed that hackers breached its GitHub repositories and stole documents… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/acuity-confirms-hackers-stole-non-sensitive-govt-data-from-github-repos/
-
How to Get CMMC Certified
This quick guide breaks down the steps of achieving CMMC so your business can protect sensitive government data. The post ck guide breaks down the st… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/how-to-get-cmmc-certified/
-
New NPSA 2024 Guidelines for Mitigating Insider Risk
UK NPSA provides a comprehensive guide to communication and preparedness for mitigating insider risk The UK government’s National Protective Security … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/new-npsa-2024-guidelines-for-mitigating-insider-risk/
-
FCC: Phone Network Bugs Must Be Fixed ” But are SS7/Diameter Beyond Repair?
Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulnerabilities. The post u… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/fcc-ss7-diameter-richixbw-2/
-
Acuity Responds to US Government Data Theft Claims, Says Hackers Obtained Non-Sensitive Info
Acuity, the tech firm from which hackers claimed to have stolen State Department and other government data, confirms hack, but says stolen info is old… First seen on securityweek.com Jump to article: www.securityweek.com/acuity-responds-to-us-government-data-theft-claims-says-hackers-obtained-old-info/
-
Cyber Safety Review Board Report Slams Microsoft Security Failures in Government Email Breach
A report has highlighted multiple security failings by Microsoft that allowed Chinese threat actors to access US government officials’ email accounts … First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-security-failures/
-
A >>cascade<< of errors let Chinese hackers into US government inboxes
Microsoft still doesn’t known how Storm-0558 attackers managed to steal the Microsoft Services Account cryptographic key they used to forge authentica… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/04/03/microsoft-storm-0558-key/
-
Acuity Responds to US Government Data Theft Claims, Says Hackers Obtained Old Info
Acuity, the tech firm from which hackers claimed to have stolen State Department and other government data, confirms hack, but says stolen info is old… First seen on securityweek.com Jump to article: www.securityweek.com/acuity-responds-to-us-government-data-theft-claims-says-hackers-obtained-old-info/
-
Missouri county latest local government ransomware victim, 18th of 2024
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/missouri-county-government-confirms-ransomware-attack
-
Indian Government, Oil Companies Breached by ‘HackBrowserData’
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/indian-government-breached-by-hackbrowserdata-information-stealer