Tag: government
-
Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations
A cyberattack compromised tens of thousands of records related to companies, foundations and trusts in Liechtenstein, prompting the government to to form a “crisis unit” to address the breach. First seen on therecord.media Jump to article: therecord.media/hackers-steal-records-liechtenstein-companies-foundations
-
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals, government partners and customers.The incident, identified on July 26, also exposed some names First seen…
-
Liechtenstein: Hacker kopieren 31.000 Datensätze aus Wirtschaftsregister
Die liechtensteinische Regierung muss nicht nur dem Angriff nachgehen, sondern auch Maßnahmen wegen der Verletzung der DSGVO ergreifen. First seen on golem.de Jump to article: www.golem.de/news/liechtenstein-hacker-kopieren-31-000-datensaetze-aus-wirtschaftsregister-2608-211538.html
-
UK’s state investments agency hit by data breach
Security lapse leaves sensitive information and contact details of 51 government officials exposed for 40 hoursThe public body in charge of the UK’s state investments has been pushed to improve its internal security after a data breach left “high-level management information” publicly accessible for nearly two days.UK Government Investments (UKGI), the agency that manages the…
-
Claude Mythos Finds Weakness in NIST Post-Quantum Candidate
Anthropic’s Claude model helped uncover a weakness in a post-quantum digital signature scheme that was being considered for a U.S. government standard, prompting its developers to withdraw it from the competition. Anthropic said Claude Mythos Preview found a faster method for recovering keys from HAWK, a candidate in a NIST competition seeking alternatives to widely..…
-
To Ban or Not Ban Chinese Open-Weight AI Models
Tags: ai, backdoor, china, control, cybersecurity, data, defense, finance, government, infrastructure, international, malicious, microsoft, military, network, nvidia, open-source, openai, regulation, risk, software, supply-chain, technology, usaShould the US ban American companies from using Chinese open-weight AI models? That is the ugly question. US officials have openly expressed concerns and a desire to implement regulations. The technology community has aggressively responded, with over 20 leading AI companies, including Microsoft, Nvidia, Meta, and Dell, urging legislators not to rush imposing restrictions on…
-
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January”¯2025.These targeted organizations operate across several sectors, such as healthcare, research, government offices, First seen on thehackernews.com Jump to article:…
-
The Cyber Express Weekly Roundup: AI Fraud, Data Leaks, Malware Campaigns, and Critical Infrastructure Threats
Tags: ai, cyber, cyberattack, data, exploit, finance, fraud, government, infrastructure, intelligence, leak, malicious, malware, software, threatThis weekly roundup highlights the growing complexity of digital threats affecting governments, businesses, developers, and consumers. From artificial intelligence being misused for financial fraud to large-scale customer data exposures, malicious software targeting developer ecosystems, and cyberattacks against critical infrastructure, recent incidents demonstrate how attackers are exploiting both emerging technologies and existing security weaknesses. First seen…
-
OctLurk and SilkLurk Backdoors Target Central Asian Governments in Cyberespionage Campaign
OctLurk and SilkLurk are highly customized, memory”‘resident backdoors used in an ongoing cyberespionage campaign against government and critical”‘sector networks across Central Asia and Syria, operated by a Chinese”‘speaking threat actor but not yet linked to a known APT. Active since January 2025, the operation leverages victim”‘specific loaders, multi”‘plugin frameworks, and shared infrastructure, along with Linux”‘focused…
-
CISA shares advice on isolating vital systems during cyberattacks
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-shares-advice-on-isolating-vital-systems-during-cyberattacks/
-
PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites
PhantomEnigma abuses Brazilian government websites and trusted email channels to spread malware, target banks, evade security checks, and maintain access. First seen on hackread.com Jump to article: hackread.com/phantomenigma-infects-malware-hijack-gov-sites/
-
Wyden Calls for Edge Device Annihilation in US Government
US Senator Says Zero Trust Must Replace Legacy Edge Devices in 2028. Network devices conversion into nation-state hackers’ favorite initial access vector has a U.S. senator urging the federal government to phase out legacy, public-facing remote access systems in favor of zero trust architecture. Security experts have long flagged network edge devices as a risk.…
-
US Space Cybersecurity: ‘No One Is in Charge’
Cyber Defense Falters Without Cabinet Agency or White House Champion for Security. No single senior official is in charge of U.S. efforts to help secure commercial satellites and their land-based infrastructure. That leadership void has hampered the ability to impose security standards on space vendors providing critical services to the U.S. government over the past…
-
Activist charged with felony after giving border agent duress code that wiped his phone
The government says destroying his own data during an airport interrogation was illegal. First seen on arstechnica.com Jump to article: arstechnica.com/gadgets/2026/07/activist-charged-with-felony-after-giving-border-agent-duress-code-that-wiped-his-phone/
-
Sen. Wyden urges feds to discard older, insecure, public-facing VPNs
In a letter first reported by CyberScoop, Ron Wyden, D-Ore., said ‘devastating’ attacks on the federal government have accumulated due to the tech. First seen on cyberscoop.com Jump to article: cyberscoop.com/wyden-calls-for-federal-legacy-vpn-purge-zero-trust/
-
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting government entities in the Middle East.The intrusions have resulted in the deployment of previously unreported malware families dubbed TELESHIM, MIXEDKEY, and BINDCLOAK, according to Zscaler ThreatLabz. The cybersecurity firm said it detected the campaign earlier this month.…
-
The hacker who humiliated spyware makers and was never caught
An awe-inspiring hacktivist who hacked two controversial government spyware makers may be the most prolific hacker to have never gotten caught. What do we know about Phineas Fisher? First seen on techcrunch.com Jump to article: techcrunch.com/2026/07/25/the-hacker-who-humiliated-spyware-makers-and-was-never-caught/
-
US government to consider AI Kill Switch law
Two US congressmen have introduced a bill to give Washington the power to pull the plug on rogue AI models in an emergency. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366646128/US-government-to-consider-AI-Kill-Switch-law
-
US accuses American of allegedly wiping his phone using a ‘duress’ password during border search
A U.S. citizen has asked a court to throw out the government’s claim that he gave over a passcode to border authorities that wiped his phone’s data, opening up fresh questions about a person’s constitutional rights at the U.S. border. First seen on techcrunch.com Jump to article: techcrunch.com/2026/07/24/us-accuses-american-of-allegedly-wiping-his-phone-using-a-duress-password-during-border-search/
-
Chatkontrolle – EU-Regierungen führen Übergangsregelung wieder ein
Tags: governmentDie EU-Mitgliedstaaten haben ohne Zustimmung des EU-Parlaments die Übergangsregelung zur Chatkontrolle erneut verlängert. First seen on computerbase.de Jump to article: www.computerbase.de/news/netzpolitik/chatkontrolle-eu-regierungen-fuehren-uebergangsregelung-wieder-ein.98547
-
GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian Governments
At a glance Malware family GoSerpent backdoor, plus McMx, Stowaway, ThumbcacheService, and TmcLoader/TmcPayload Threat actor Unconfirmed. Kaspersky notes First seen on securityonline.info Jump to article: securityonline.info/goserpent-backdoor/
-
Russian hackers exploit unpatched Zimbra servers to steal emails
Russian state-backed hacker group Laundry Bear has been breaking into government and commercial networks for at least a year by exploiting a vulnerability in the Zimbra … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/24/laundry-bear-zimbra-vulnerability-cve-2025-66376/
-
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers
Tags: advisory, apt, cybersecurity, email, exploit, flaw, government, group, infrastructure, international, russiaUS agencies warn Russian group Laundry Bear is exploiting a patched Zimbra flaw to steal email accounts from organizations running unpatched servers. The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI) and other U.S. government and international partners published a joint advisory to warn that the Russia-linked APT…
-
Russian LAUNDRY BEAR Hackers Exploit Zimbra Zero-Day to Steal 90 Days of Emails
Tags: advisory, cyber, cybersecurity, defense, email, espionage, exploit, government, group, hacker, russia, technology, threat, vulnerability, zero-dayRussian state-supported threat actors, known as LAUNDRY BEAR, have exploited a zero-day vulnerability in the Zimbra Collaboration Suite to steal up to 909,090 days’ worth of emails from targeted organizations across Western countries. A joint cybersecurity advisory, AA26-204A, issued on July 23, 2026, warns that this espionage-focused group has targeted government, defense, energy, technology, education,…
-
Russian TA488 Exploits Zimbra CVE-2025-66376 to Target Government Mail Servers
Russian-aligned TA488 exploited Zimbra CVE-2025-66376 in a half-click attack. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/russian-ta488-exploits-zimbra-cve-2025-66376-to-target-government-mail-servers/
-
US government says Iran-linked hackers are disrupting American water and energy providers
An updated government advisory warns that Iranian hackers are exploiting systems used by water and energy providers. First seen on techcrunch.com Jump to article: techcrunch.com/2026/07/23/us-government-says-iran-linked-hackers-are-disrupting-american-water-and-energy-providers/
-
TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits
At a Glance Actor or group TA488 (Void Blizzard, Laundry Bear) and TA458 (Operation RoundPress), both Russia-aligned Activity First seen on securityonline.info Jump to article: securityonline.info/half-click-exploits-webmail/
-
China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks
An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader.Group-IB found the server in mid-April 2026 in Alibaba Cloud’s Singapore region; it was offline by the time…
-
Iranian Hackers Target Siemens and Schneider Industrial Systems, CISA Warns
US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/iran-hackers-siemen-schneider-ics/
-
Google Released Gemini 3.5 Flash Cyber AI, a Specialized AI Model for Vulnerability Hunting
Google DeepMind unveiled Gemini 3.5 Flash Cyber, an AI model for vulnerability discovery and patching, available only to governments and trusted partners. Google DeepMind announced Gemini 3.5 Flash Cyber on Tuesday, a security-focused AI model built on top of the existing 3.5 Flash architecture and designed specifically to find, validate, and patch software vulnerabilities. It…