Collecting Cyber-News from over 60 sources

Tag: government

Pro-Russian group claims hits on Danish party websites as voters head to polls

Nov 18, 2025 7:50 PM

Tags: ddos, government, group, russia

Voting was not disrupted Tuesday by a wave of DDoS incidents affecting political party and government websites in Denmark a day earlier, officials said. First seen on therecord.media Jump to article: therecord.media/denmark-election-political-government-websites-ddos-incidents
The Data Privacy Risk Lurking in Paperless Government

Nov 18, 2025 5:49 PM

Tags: compliance, data, government, privacy, risk

The world is becoming increasingly paperless, and most organizations, including federal agencies, are following suit. Switching from paper-based processes to digital ones offers great benefits. However, the security and compliance challenges that come with this shift aren’t to be taken lightly. As the federal government goes paperless to cut costs and modernize operational processes, a..…
Full renewal of state and local cyber grants program passes in House

Nov 18, 2025 2:47 PM

Tags: cyber, cybersecurity, government

The PILLAR Act, which would renew federal cybersecurity grants to state and local governments through 2033, passed by voice vote in the House. First seen on therecord.media Jump to article: therecord.media/state-local-cyber-grants-program-house-passage
Inspector General Flags Security Gap in NIH Genomics Project

Nov 17, 2025 11:50 PM

Tags: access, data, government, risk, theft

NIH Working on Fixes to Address National Security Risks and Weak Access Controls. The sensitive health and genomics data of 1 million Americans used by a National Institutes of Health research project could be at risk for access or theft by bad actors, including foreign adversaries, a government watchdog group. Security weaknesses discovered in an…
Iranian Hackers Use SpearSpecter to Target Senior Government Leaders

Nov 17, 2025 11:50 PM

Tags: government, hacker, iran, social-engineering

An Iranian campaign called SpearSpecter is quietly targeting senior officials with tailored social engineering and fileless malware. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/iranian-hackers-use-spearspecter-to-target-senior-government-leaders/
Dozens of groups call for governments to protect encryption

Nov 17, 2025 10:49 PM

Tags: access, government, group

The letter comes as countries in Europe have moved over the past year to regulate or mandate legalized access for criminal and national security investigations. First seen on cyberscoop.com Jump to article: cyberscoop.com/encryption-sixty-groups-call-on-governments-to-oppose-backdoor-mandates/
Kenyan gov’t websites back online after hackers deface pages with white supremacist messages

Nov 17, 2025 7:49 PM

Tags: government, hacker

A handful of Kenyan government websites were defaced with white supremacist slogans. First seen on therecord.media Jump to article: therecord.media/kenyan-gov-websites-back-hack
CISA gives federal agencies one week to patch exploited Fortinet bug

Nov 17, 2025 2:49 PM

Tags: cisa, exploit, firewall, fortinet, government, update, vulnerability

U.S. government agencies have been given a shorter window than usual to patch a critical vulnerability affecting Fortinet’s FortiWeb firewall product. First seen on therecord.media Jump to article: therecord.media/fortinet-fortiweb-vulnerability-cisa-advisory
Iran-Linked SpearSpecter Campaign Leveraging Personalized Social Engineering Against High-Value Officials

Nov 17, 2025 2:49 PM

Tags: cyber, defense, espionage, government, group, intelligence, iran, social-engineering, threat

Iranian threat actors aligned with the Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO) are conducting a sophisticated espionage campaign tracked as SpearSpecter, systematically targeting high-value senior defense and government officials through personalized social engineering tactics. The threat group, operating under multiple aliases including APT42, Mint Sandstorm, Educated Manticore, and CharmingCypress, has demonstrated remarkable patience and…
Iran-Linked SpearSpecter Campaign Leveraging Personalized Social Engineering Against High-Value Officials

Nov 17, 2025 2:49 PM

Tags: cyber, defense, espionage, government, group, intelligence, iran, social-engineering, threat

Iranian threat actors aligned with the Islamic Revolutionary Guard Corps Intelligence Organization (IRGC-IO) are conducting a sophisticated espionage campaign tracked as SpearSpecter, systematically targeting high-value senior defense and government officials through personalized social engineering tactics. The threat group, operating under multiple aliases including APT42, Mint Sandstorm, Educated Manticore, and CharmingCypress, has demonstrated remarkable patience and…
FedRAMP Deviation Requests: When and How to Submit

Nov 15, 2025 1:49 PM

Tags: cloud, fedramp, government, nist, service

FedRAMP is a government-wide program meant to ensure a standardized baseline for information security throughout the cloud service providers working with the federal government. It’s a tall order. Setting forth standards that are robust enough to cover all the bases, while being open and flexible enough to cover every CSP, is not easy. NIST has……
ISMG Editors: What Comes Next After US Government Shutdown?

Nov 14, 2025 8:49 PM

Tags: government, privacy, service, startup

Also: Insights From ISMG’s Global Events, Tenzai’s $75 Million Seed Round. In this week’s panel, ISMG editors broke down the mounting pressure on the Department of Health and Human Services and its privacy and security operations, the $75 million seed round for autonomous pen testing startup Tenzai and key themes from ISMG’s recent global summits…
TDL 009 – Inside DNS Threat Intelligence: Privacy, Security Innovation

Nov 14, 2025 7:49 PM

Tags: access, apple, attack, automation, backup, best-practice, business, ceo, cisco, ciso, cloud, computer, control, corporate, country, crime, cybersecurity, data, dns, encryption, finance, firewall, government, infrastructure, intelligence, Internet, jobs, law, linkedin, malicious, marketplace, middle-east, monitoring, msp, network, office, privacy, regulation, risk, service, software, strategy, threat, tool, windows, zero-trust

Summary Inside DNS Threat Intelligence: Privacy, Security & Innovation In this episode of the Defenders Log, host David Redekop speaks with Tim Adams, the founder of the protective DNS resolver Scout DNS. Tim shares his origin story, explaining how he transitioned from a wireless network integrator to building his own DNS solution. He saw a…
AI firm claims it stopped Chinese state-sponsored cyber-attack campaign

Nov 14, 2025 6:49 PM

Tags: ai, attack, china, cyber, finance, government, group, intelligence, tool

Anthropic says financial firms and government agencies were attacked ‘largely without human intervention’A leading artificial intelligence company claims to have stopped a China-backed “cyber espionage” campaign that was able to infiltrate financial firms and government agencies with almost no human oversight.The US-based Anthropic said its coding tool, Claude Code, was “manipulated” by a Chinese state-sponsored…
Western governments disrupt trifecta of cybercrime tools

Nov 14, 2025 5:49 PM

Tags: cybercrime, government, tool

Authorities seized more than 1,000 servers and 20 domains in the operation. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/operation-endgame-third-phase-infostealer-rat-botnet/805549/
Are We in the Quantum Decade?

Nov 14, 2025 4:49 PM

Tags: computer, government, startup

Growing Enterprise Use Cases and National Missions Signal Toward a Quantum Era. Quantum computers are finally emerging from sterile labs after decades of research and development. Recent breakthroughs and use cases indicate that the quantum decade has begun, with collaboration across the private sector, startup community, government and academia accelerating development. First seen on govinfosecurity.com…
Iranian Hackers Launch ‘SpearSpecter’ Spy Operation on Defense & Government Targets

Nov 14, 2025 4:49 PM

Tags: defense, espionage, government, hacker, iran, spy, threat

The Iranian state-sponsored threat actor known as APT42 has been observed targeting individuals and organizations that are of interest to the Islamic Revolutionary Guard Corps (IRGC) as part of a new espionage-focused campaign.The activity, detected in early September 2025 and assessed to be ongoing, has been codenamed SpearSpecter by the Israel National Digital Agency (INDA).”The…
DDoS Cyberattack Disrupts Danish Government and Defense Websites

Nov 14, 2025 8:49 AM

Tags: attack, country, cyberattack, ddos, defense, government, intelligence, military, monitoring, service

A cyberattack on Danish institutions disrupted several government and defense-related websites on November 13, according to the country’s Civil Protection Agency. The incident, which involved widespread DDoS attacks, caused temporary outages across multiple online services and prompted authorities to intensify monitoring alongside Denmark’s military intelligence service. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cyberattack-on-danish-government-sites/
Emulating the Espionage-Oriented Group SideWinder

Nov 14, 2025 6:49 AM

Tags: attack, cyber, espionage, exploit, government, group, microsoft, military, office, phishing, spear-phishing, threat, vulnerability

AttackIQ has released a new attack graph that emulates the behaviors exhibited by SideWinder, a threat actor with a long history of cyber espionage dating back to 2012. The group has primarily targeted government, military, and maritime sectors across South Asia and nearby regions through sophisticated spear-phishing campaigns, exploitation of Microsoft Office vulnerabilities, and the…
Emulating the Espionage-Oriented Group SideWinder

Nov 14, 2025 6:49 AM

Tags: attack, cyber, espionage, exploit, government, group, microsoft, military, office, phishing, spear-phishing, threat, vulnerability

AttackIQ has released a new attack graph that emulates the behaviors exhibited by SideWinder, a threat actor with a long history of cyber espionage dating back to 2012. The group has primarily targeted government, military, and maritime sectors across South Asia and nearby regions through sophisticated spear-phishing campaigns, exploitation of Microsoft Office vulnerabilities, and the…
CISA warns of Akira ransomware Linux encryptor targeting Nutanix VMs

Nov 13, 2025 11:49 PM

Tags: cisa, government, linux, ransomware

US government agencies are warning that the Akira ransomware operation has been spotted encrypting Nutanix AHV virtual machines in attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-akira-ransomware-linux-encryptor-targeting-nutanix-vms/
Breach Roundup: UK Probes Chinese-Made Electric Buses

Nov 13, 2025 10:49 PM

Tags: android, breach, china, google, government, hacker, korea, north-korea, switch, update

Also, North Korean Hackers Remotely Wipe Android Devices. This week, the U.K. government probed Chinese electric buses for a kill switch, APT37 abused Google’s Find Hub in South Korea, Conduent said its January hack will cost it more, Hyundai disclosed a breach and Patch Tuesday. OWASP added two new categories to its Top 10 web…
CISA warns federal agencies to patch flawed Cisco firewalls amid ‘active exploitation’ across the US government

Nov 13, 2025 6:49 PM

Tags: cisa, cisco, cybersecurity, exploit, firewall, government, update

The federal cybersecurity agency said some government departments had been actively exploited after failing to properly patch their systems. First seen on techcrunch.com Jump to article: techcrunch.com/2025/11/13/cisa-warns-federal-agencies-to-patch-flawed-cisco-firewalls-amid-active-exploitation-across-the-us-government/
Scottish government to launch cyber observatory

Nov 13, 2025 6:49 PM

Tags: cyber, government, risk, threat

The observatory will analyse and share warnings on public sector cyber threats, and identify emerging risks First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366634326/Scottish-government-to-launch-cyber-observatory
Book Review: The Business of Secrets

Nov 13, 2025 5:49 PM

Tags: business, crypto, cryptography, encryption, government, Hardware

The Business of Secrets: Adventures in Selling Encryption Around the World by Fred Kinch (May 24, 2004) From the vantage point of today, it’s surreal reading about the commercial cryptography business in the 1970s. Nobody knew anything. The manufacturers didn’t know whether the cryptography they sold was any good. The customers didn’t know whether the…
Two key cyber laws are back as president signs bill to end shutdown

Nov 13, 2025 4:49 PM

Tags: cisa, cyber, cybersecurity, government, law

The cyberthreat information sharing law known as CISA 2015 and a cybersecurity grant program for state and local governments have been renewed as part of legislation to reopen the government. First seen on therecord.media Jump to article: therecord.media/cisa-2015-state-local-grants-renewed-legislation-ending-shutdown
Two key cyber laws are back as president signs bill to end shutdown

Nov 13, 2025 4:49 PM

Tags: cisa, cyber, cybersecurity, government, law

The cyberthreat information sharing law known as CISA 2015 and a cybersecurity grant program for state and local governments have been renewed as part of legislation to reopen the government. First seen on therecord.media Jump to article: therecord.media/cisa-2015-state-local-grants-renewed-legislation-ending-shutdown
Government funding bill temporarily revives cybersecurity information-sharing law

Nov 13, 2025 2:49 PM

Tags: cisa, cybersecurity, government, law

The spending legislation passed by Congress will reauthorize the CISA 2015 program through the end of January. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-2015-temporary-reauthorization-spending-bill/805320/
Google asks US court to shut down Lighthouse phishing-as-a-service operation

Nov 13, 2025 5:49 AM

Tags: control, crime, cyber, cybercrime, cybersecurity, email, google, government, incident response, law, malicious, network, phishing, risk, sans, scam, service, smishing, technology, threat

Will have ‘minimal impact’: Ed Dubrovsky, chief operating officer of incident response firm Cypher, is skeptical of the effectiveness of court action. Phishing-as-a-service operations don’t have to be on American soil, he explained, so court orders and legislation will likely have minimal impact on smishing or phishing attacks.”However,” he added, “I can understand that even…
UK Unveils Cyber Security and Resilience Bill

Nov 13, 2025 12:49 AM

Tags: cyber, cybersecurity, government, regulation, resilience

Legislation Proposes More Regulations for Greater Swath of the UK Economy. The British government introduced Wednesday long-anticipated cybersecurity legislation aimed at tackling disruptive hacks targeting critical national infrastructure. Companies that run afoul of the new regulations could face daily fines that amount to 10% of their global revenue. First seen on govinfosecurity.com Jump to article:…