Tag: government
-
Microsoft Investigates Leak in Early Warning System Used by Chinese Hackers to Exploit SharePoint Vulnerabilities
Tags: breach, china, cyber, cybersecurity, exploit, flaw, government, hacker, international, law, leak, microsoft, software, vulnerabilityChinese laws requiring vulnerability disclosure to the government create transparency issues and potential conflicts for international cybersecurity efforts. Microsoft is probing whether a leak from its confidential early warning system enabled Chinese state-sponsored hackers to exploit significant flaws in its SharePoint software, leading to breaches at over 400 organizations, including the U.S. agency responsible for…
-
Microsoft-owned GitHub: Open source needs funding. Ya think?
‘Industry, national governments, and the EU’ must pay for maintainers. El Reg says charity shouldn’t start at home First seen on theregister.com Jump to article: www.theregister.com/2025/07/24/microsoftowned_github_says_open_source/
-
Despite changes, crisis pregnancy centers still attract scrutiny over HIPAA promises
Some crisis pregnancy centers (CPCs) still tell visitors that their data is protected under the HIPAA privacy law, despite guidance to the contrary from the government and CPCs’ own umbrella organizations. Data privacy and abortion-rights groups want states to do more to end those claims. First seen on therecord.media Jump to article: therecord.media/crisis-pregnancy-centers-hipaa-data-privacy
-
The Young and the Restless: Young Cybercriminals Raise Concerns
National governments warn that many hacker groups attract young people through a sense of community, fame, or the promise of money and the perception of a lack of risk of prosecution. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/young-cybercriminals-raise-concerns
-
US Announces $15M Reward for North Korean IT Scheme Leaders
The United States government announced coordinated actions across multiple departments today, offering rewards totaling up to $15 million for information leading to the arrests and convictions of North Korean nationals involved in extensive revenue generation schemes targeting American companies and citizens. The Department of State’s Transnational Organized Crime Rewards Program is specifically targeting Sim Hyon-sop…
-
US Announces $15M Reward for North Korean IT Scheme Leaders
The United States government announced coordinated actions across multiple departments today, offering rewards totaling up to $15 million for information leading to the arrests and convictions of North Korean nationals involved in extensive revenue generation schemes targeting American companies and citizens. The Department of State’s Transnational Organized Crime Rewards Program is specifically targeting Sim Hyon-sop…
-
Cloudflare veröffentlicht Internet Disruptions Report für Q2 2025
Der Report zeigt: Von der Regierung veranlasste Abschaltungen des Internetverkehrs kehrten im zweiten Quartal mit aller Macht zurück. Interessanterweise setzt sich dieser Trend auch in Q3 fort, wenngleich die jüngsten von Cloudflare beobachteten Shutdowns mit Prüfungen zusammenhängen und nicht durch Proteste ausgelöst wurden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cloudflare-veroeffentlicht-internet-disruptions-report-fuer-q2-2025/a41478/
-
Vanta Secures $150M at $4.15B Valuation to Advance AI Trust
Series D Raise Targets Security Automation, Trust Centers and Zero-Touch Reviews. With $150 million in new Series D funding at a $4.15 billion valuation, Vanta plans to accelerate its AI-powered trust platform across new markets including government compliance. The company’s tools automate evidence collection, risk management and policy enforcement in real time. First seen on…
-
Warning to feds: US infrastructure is under silent attack
Tags: attack, awareness, breach, business, ceo, cisa, control, cyber, cybersecurity, data, defense, exploit, government, Hardware, infrastructure, intelligence, risk, technology, theft, threat, vulnerabilityIT and OT are fundamentally different: Robert M. Lee, CEO and co-founder of cybersecurity company Dragos, Inc., also spoke at the hearing, pointing out that enterprises and regulators must “recognize and account for” the differences between information technology (IT) and OT systems.”IT and OT systems differ fundamentally in both purpose and operation,” he said. “While…
-
UK proposal would forbid ransom payments by gov’t agencies, but will it meaningfully decrease ransomware attacks?
Tags: attack, backup, business, ceo, dark-web, data, finance, government, group, hacker, intelligence, law, ransom, ransomware, threatBusinesses often want to pay ransom: Fred Chagnon, principal research director at Info-Tech Research Group noted that, from a business continuity perspective, it can make sense to pay the ransom.”Paying the ransom can sometimes be the quickest and least damaging path to restoring operations, especially if backups are compromised or recovery is prohibitively slow. While…
-
UK moves to ban public sector organizations from making ransom payments
Private companies would also have to report to the government if they plan to pay off cybercriminals. First seen on cyberscoop.com Jump to article: cyberscoop.com/uk-ransomware-payment-ban-public-sector-private-business-reporting/
-
UK government wants ransomware victims to report breaches so it can carry out ‘targeted disruptions’ against hackers
Experts applauded the proposed change, which would require ransomware victims to notify authorities when paying a hacker’s ransom, arguing that this information can help catch cybercriminals and stop their activities. First seen on techcrunch.com Jump to article: techcrunch.com/2025/07/22/uk-government-wants-ransomware-victims-to-report-cyberattacks-so-it-can-disrupt-the-hackers/
-
Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks
US DOE among breached government agencies First seen on theregister.com Jump to article: www.theregister.com/2025/07/23/microsoft_sharepoint_400_orgs/
-
Hackers Exploit Microsoft SharePoint Flaws in Global Breaches
Hackers are exploiting critical SharePoint flaws (CVE-2025-53770/53771) to breach global targets, including governments and corporations. Microsoft urges immediate action. Learn about the active attacks and how to protect your network from credential theft and backdoors. First seen on hackread.com Jump to article: hackread.com/hackers-exploit-microsoft-sharepoint-flaws-breaches/
-
UK Signals It Will Back Peddle on Apple Encryption Demand
Apple, US Took Hard Line Against British Demand. The U.K. government is reportedly set to reverse course on requiring smartphone giant Apple to give police access to device data stored as backups in the California company’s cloud service. The Home Office is basically going to have to back down, a British official said. First seen…
-
US Nuclear Agency Breach Tied to SharePoint Zero-Days
Over 400 Organizations Breached via Ongoing ToolShell Attacks, Researchers Warn. The U.S. government agency that maintains and designs America’s nuclear weapons was reportedly breached by attackers exploiting zero-day flaws in on-premises Microsoft SharePoint servers, with researchers now counting over 400 victims, including European and Middle Eastern governments. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/us-nuclear-agency-breach-tied-to-sharepoint-zero-days-a-29037
-
UK government to bring in ransomware payment ban
Critical infrastructure operators, hospitals, local councils and schools will be among those banned from giving in to cyber criminal demands as the UK moves forward with proposals to address the scourge of ransomware First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366628013/UK-government-to-bring-in-ransomware-payment-ban
-
UK government signs partnership with OpenAI
Deal sees firm behind ChatGPT collaborate with government on AI security research to explore investment opportunities First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627871/UK-government-signs-partnership-with-OpenAI
-
Microsoft SharePoint attacks target on-premises servers
Thousands of organizations, including government agencies, running SharePoint on-premises are vulnerable after Microsoft issued a security alert warning of active attacks. First seen on techtarget.com Jump to article: www.techtarget.com/searchcontentmanagement/news/366627759/Microsoft-SharePoint-attacks-target-on-premises-servers
-
Nearly Half of MSPs Have Dedicated Kitty For Ransomware Incidents
Recent research by Cybersmart has revealed that nearly half (45%) of MSPs admitted to having a dedicated pool of money set aside for ransomware payments. This is despite increasing pressure from insurers and global governments to avoid paying ransoms to stop fuelling criminal enterprises and encourage proactive resilience. Historically, the guidance and best practice around…
-
US Nuclear Weapons Data Compromised via SharePoint Zero-Day Attack
Tags: attack, breach, china, cyber, cybersecurity, data, data-breach, exploit, government, group, hacker, hacking, infrastructure, microsoft, vulnerability, zero-dayA significant cybersecurity breach has exposed vulnerabilities in critical US government infrastructure, as the National Nuclear Security Administration (NNSA) was reportedly compromised through a Microsoft SharePoint zero-day exploit linked to Chinese government-affiliated hacking groups. Chinese Hackers Target Critical Infrastructure The breach came to light hours after Microsoft disclosed that Chinese government-affiliated hacking groups had been…
-
US Government Warns of Wide-Ranging Interlock Attacks
A joint US government advisory highlighted novel initial access techniques deployed by Interlock, and urged businesses and critical infrastructure to stay vigilant First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-government-interlockattacks/
-
UK Confirms Ransomware Payment Ban for Public Sector and CNI
The UK government said a public consultation showed widespread support on a payment ban for public sector and CNI organizations First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-ransomware-payment-ban-public/
-
US nuclear weapons agency ‘among 400 organisations breached by Chinese hackers’
Tags: business, china, cybersecurity, data-breach, exploit, government, group, hacker, microsoft, threat, vulnerabilityMicrosoft says vulnerabilities in its SharePoint servers exposed as reports point to wave of attacks<ul><li><a href=”https://www.theguardian.com/business/live/2025/jul/23/stock-markets-rally-us-japan-trade-deal-nikkei-ftse-100-libor-appeal-business-live”>Business live latest updates</li></ul><a href=”https://www.theguardian.com/technology/microsoft”>Microsoft says Chinese “threat actors”, including state-sponsored hackers, have exploited security vulnerabilities in its SharePoint document-sharing servers, with research indicating that several hundred government agencies and organisations have been breached.Hackers have already breached 400 agencies, businesses…
-
Microsoft Sharepoint ToolShell attacks linked to Chinese hackers
Hackers with ties to the Chinese government have been linked to a recent wave of widespread attacks targeting a Microsoft SharePoint zero-day vulnerability chain. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-sharepoint-toolshell-attacks-linked-to-chinese-hackers/
-
Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access
Tags: access, cybersecurity, exploit, government, hacker, microsoft, software, vulnerability, zero-dayThe recently disclosed critical Microsoft SharePoint vulnerability has been under exploitation as early as July 7, 2025, according to findings from Check Point Research.The cybersecurity company said it observed first exploitation attempts targeting an unnamed major Western government, with the activity intensifying on July 18 and 19, spanning government, telecommunications, and software First seen on…
-
UK government to ban public bodies from paying ransoms to hackers
Tags: attack, computer, cyber, cybercrime, government, hacker, healthcare, international, office, ransom, ransomware, russiaMeasure intended to send message to international cybercriminals ‘that the UK is united in fight against ransomware’The UK government is planning to ban public bodies from paying ransoms to computer hackers, and private companies will be required to inform authorities if they plan to cave into cash demands.The stance, announced on Tuesday by the Home…
-
Microsoft ‘digital escorts’ reveal crucial US counterintelligence blind spot
Tags: access, china, cio, cloud, compliance, country, cyber, cybersecurity, data, defense, firewall, framework, google, government, injection, intelligence, law, microsoft, military, oracle, risk, service, threat, update, vulnerabilityWhat the program was, and how it worked: The digital escort model, according to ProPublica, was designed to comply with federal contracting rules that prohibit foreign nationals from directly accessing sensitive government systems. Under this framework:China-based engineers would file support tickets for tasks such as firewall updates or bug fixes.US-based escorts, often former military personnel…