Tag: government
-
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware
Tags: attack, china, exploit, flaw, government, infrastructure, microsoft, ransomware, threat, tool, vulnerabilityThe suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries.The activity, observed by the Symantec and Carbon Black Threat Hunter Team, has hit critical infrastructure, government, and education organizations.”In the First seen on thehackernews.com Jump…
-
Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel
Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian governments. Cisco Talos has been tracking a cluster of espionage activity since September 2025 that it calls UAT-11587, and by July 2026 the group had hit at least 16 government and policy organizations across eight…
-
Is It America First, AI Safety Second?
Washington Gets First Draw on Frontier AI, But Outlaw Agents Ride On Washington wants first dibs on testing American frontier AI models while telling a trusted ally to wait its turn. That’s a curious way to police the frontier considering that British researchers keep finding agents that ignore boundaries and American-built agents are already hacking…
-
Hacking Contest Pits Dubai Government Agencies HeadHead
Live And IRL Hacking Contest Captured Attention at Vast GISEC Global Expo. For many of the local visitors to the vast GISEC Global cybersecurity conference and expo in Dubai last month, one of the highlights was a capture-the-flag hacking contest pitting small teams from different government agencies against each other for cash prizes. First seen…
-
Warlock ransomware breach SharePoint in water, telecom operator attacks
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks/
-
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor.The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deployment of a previously undocumented backdoor codenamed Antino. Cisco Talos is tracking the cluster First…
-
SWIFT Banking & Government Middleware Enables RCE
Tags: banking, exploit, government, Hardware, mfa, rce, remote-code-execution, update, vulnerabilityPatch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce
-
AI Agents Attempt SQL Injection While Searching Government Data
AI agents probing US and Canadian government sites made SQL injection attempts while seeking data, but investigators found no evidence of compromise. Autonomous AI agents, working on what looks like ordinary data retrieval tasks, ended up throwing basic hacking attempts at a U.S. Department of Education site and Library and Archives Canada. Nobody told them…
-
OpenAI’s Medicare attack has exposed Australia’s ‘tech debt’. Fixing it could bring a big bill for taxpayers
Home affairs department orders all federal government agencies to conduct review of ‘legacy technology’ amid fallout from AI agent hacks <ul><li>Get our <a href=”https://www.theguardian.com/email-newsletters?CMP=cvau_sfl”>breaking news email, <a href=”https://app.adjust.com/w4u7jx3″>free app or <a href=”https://www.theguardian.com/australia-news/series/full-story?CMP=cvau_sfl”>daily news podcast</li></ul>The Australian government faces significant “tech debt” that could bring a big bill for taxpayers after the <a href=”https://www.theguardian.com/technology/2026/sep/24/openai-agent-hacked-medicare-australia-what-we-know-so-far-ntwnfb”>OpenAI Medicare breach, as…
-
Mississippi mayor says ransomware incident led city to shut down systems
Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating. First seen on therecord.media Jump to article: therecord.media/vicksburg-mississippi-government-ransomware-attack
-
Investigators trace an AI agent ‘s path from research task to reconnaissance
Asymmetric Security traces rogue OpenAI AI agent activity that probed government sites, accessed staging servers, and evaded sandbox limits. Researchers at Asymmetric Security spent 48 hours over the last weekend reconstructing reported rogue OpenAI AI agent activity that hit the Australian government and other organizations between March and September this year. They worked from public…
-
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/hacks-of-2-federal-agencies-in-a-month-have-spilled-a-bonanza-of-sensitive-data/
-
Autonomous AI agents tried to hack US, Canadian government websites
Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/autonomous-ai-agents-tried-to-hack-us-canadian-government-websites/
-
Federal Researchers Ramp Up AI for Faster Clinical Trials
HHS Research Arm Backs Using AI, Predictive Models and Automation to Speed Research. ARPA-H, the federal government’s health research innovation agency, is launching several projects to ramp up efforts for the use of AI, predictive modeling, automation and related technologies to advance how U.S. clinical trials are designed and conducted. First seen on govinfosecurity.com Jump…
-
National cyber director: Government-industry collaboration vital to managing AI risks, competition with nations
Sean Cairncross talked about regulations, China, pilot projects and more Thursday. First seen on cyberscoop.com Jump to article: cyberscoop.com/sean-cairncross-ai-security-china-industry-collaboration/
-
Researchers find Chinese hacking campaigns targeting AI firms, Asian governments
Two separate reports by cybersecurity companies highlight China-linked hacking operations, including a phishing campaign that impersonated Western experts. First seen on therecord.media Jump to article: therecord.media/china-linked-phishing-scheme-backdoor-taiwan
-
The Cyber Express Weekly Roundup: Renfe Confirms Breach, Australia Warns of Hijacked AI Keys, and Europol Sounds the Alarm on AI-Driven Crime
This weekly roundup covers a customer data breach at Spain’s national rail operator, an Australian government warning about attackers hijacking corporate AI services, a patient data theft from a Polish medical software platform, phishing campaigns that turn legitimate remote management tools against their victims, and a gathering of Europe’s police leaders focused on how AI…
-
Queensland Cybersecurity Department Loses $809,000 in Cyberattack
The Queensland government department in charge of the state’s cybersecurity efforts has disclosed a loss of roughly $800,000 from a cyberattack during the last financial year. Details of the CDSB cyberattack, which involved a third-party messaging service being “misused” for financial gain, appear in the QLD cybersecurity department’s latest annual report, released on Friday. First…
-
China-Nexus Hackers Compromise 350 Systems Across Asia With New Antino Backdoor
A China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across Asia using a previously undocumented Rust-based Windows backdoor called Antino. The activity cluster, tracked as UAT-11587, targeted government, defense, diplomatic, policy, academic and civil-society organizations in at least eight countries between September 2025 and July 2026. Talos identified 10 confirmed and five probable affected institutional…
-
China-Nexus Hackers Compromise 350 Systems Across Asia With New Antino Backdoor
A China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across Asia using a previously undocumented Rust-based Windows backdoor called Antino. The activity cluster, tracked as UAT-11587, targeted government, defense, diplomatic, policy, academic and civil-society organizations in at least eight countries between September 2025 and July 2026. Talos identified 10 confirmed and five probable affected institutional…
-
China-Nexus Hackers Compromise 350 Systems Across Asia With New Antino Backdoor
A China-nexus cyber-espionage campaign that compromised approximately 350 endpoints across Asia using a previously undocumented Rust-based Windows backdoor called Antino. The activity cluster, tracked as UAT-11587, targeted government, defense, diplomatic, policy, academic and civil-society organizations in at least eight countries between September 2025 and July 2026. Talos identified 10 confirmed and five probable affected institutional…
-
National cyber director defends private-sector hacking program, urges focus on security basics
Letting businesses help the government deter cybercrime will benefit all Americans, Sean Cairncross said. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/oncd-white-house-sean-cairncross-regulation-deterrence-ai/831768/
-
UAE Resists Onslaught of Iranian Cyberattacks
Gulf Kingdoms Cite Information Sharing and Private Sector Support. The United Arab Emirates is weathering a hacking onslaught from across the Persian Gulf thanks to internal resilience buttressed by partnerships with allies and hyperscalers, government officials told an international audience at the massive GISEC Global cybersecurity conference in Dubai this month. First seen on govinfosecurity.com…
-
CyberASAP Celebrates 10th Anniversary with Special Event Exploring Future of UK Cyber Security Innovation
In 2026, the Cyber Security Academic Startup Accelerator Programme (CyberASAP), which is funded by the UK Government’s Department for Digital, Culture, Media and Sport (DCMS) and delivered by Innovate UK, celebrates its 10th anniversary. Over the past decade, the programme has bridged the gap between academia and industry, accelerating the commercialisation of cutting-edge cyber technologies…
-
How much does the average UK SME spend on cybersecurity each year?
There is no single official figure for what a UK SME spends on cybersecurity today, because the UK Government stopped collecting detailed cybersecurity investment figures after its 2019 survey. The last official benchmark found that micro and small businesses spent an average of £3,490 a year, although the median was only £200 and 33% reported spending…
-
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure.By combining Microsoft 365 session theft with remote-access tool deployment, CSuite can turn a phishing incident into broader account compromise, fraud First seen on thehackernews.com…
-
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously undocumented backdoor referred to as “Antino” in developer artifacts. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/china-nexus-uat-11587-targets-government-and-policy-organizations-across-asia-with-antino-backdoor/
-
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Tags: access, citrix, exploit, finance, flaw, google, government, group, intelligence, mandiant, service, technology, threat, usaUnknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe.The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional First seen…
-
OpenAI Apologizes for Hacks on Australian Government Sites
AI Firm Admits Delayed Disclosure, Details Incidents, Promises New Agent Safeguards. OpenAI is publicly apologizing to Australian officials for a June hack by rogue AI agents of the government’s Medicare website. The AI company also listed several other Australian government websites that were accessed, pledging resources and expert support to affected agencies. First seen on…
-
OpenAI apologizes for agents breaching Australian government websites without authorization
The artificial intelligence giant acknowledged it botched its response to the incidents and should have done more to promptly notify and work with the Australian government in the days after it discovered the breaches. First seen on therecord.media Jump to article: therecord.media/openai-apologizes-australia-medicare-breach