Tag: government
-
China-linked threat actor targeted +70 orgs worldwide, SentinelOne warns
Tags: attack, china, cyber, cyberespionage, cybersecurity, espionage, government, infrastructure, threatChina-linked threat actor targeted over 70 global organizations, including governments and media, in cyber-espionage attacks from July 2024 to March 2025. In April 2025, cybersecurity firm SentinelOne warned that a China-linked threat actor, tracked as PurpleHaze, attempted to conduct reconnaissance on its infrastructure and high-value clients. The activity suggests targeted cyberespionage efforts aimed at gathering…
-
New Trump Cybersecurity Order Reverses Biden, Obama Priorities
The White House put limits on cyber sanctions, killed the digital ID program, and refocused the government’s cyber activities to enabling AI, rolling out post-quantum cryptography, and promoting secure software design. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/trump-cybersecurity-order-reverses-biden-obama-priorities
-
Spyware maker cuts ties with Italy after government refused audit into hack of journalist’s phone
Israel-based spyware maker Paragon and Italy’s government had a falling out over the company’s offer to help investigate what happened on journalist Francesco Cancellato’s phone. First seen on therecord.media Jump to article: therecord.media/paragon-spyware-maker-cuts-ties-italy-government
-
HostBreach Offers Free Cyber Snapshot For CMMC Compliance Requirements
Philadelphia-based cybersecurity firm HostBreach is offering a free CMMC Cyber Snapshot to businesses looking to maintain CMMC compliance. In particular, this refers to government contractors (GovCon) and federal contractors so they can organise their cybersecurity posture pending the Cybersecurity Maturity Model Certification (CMMC) 2.0 standards. This free offer comes at the right time, with the Department of…
-
Paragon says it canceled contracts with Italy over government’s refusal to investigate spyware attack on journalist
The Italian government claims that accepting Paragon’s help would have compromised national security and classified information. First seen on techcrunch.com Jump to article: techcrunch.com/2025/06/09/paragon-says-it-cancelled-contracts-with-italy-over-governments-refusal-to-investigate-spyware-attack-on-journalist/
-
New Report Reveals Chinese Hackers Attempted to Breach SentinelOne Servers
SentinelLABS, a sophisticated reconnaissance operation targeting SentinelOne, a leading cybersecurity vendor, has been detailed as part of a broader espionage campaign linked to China-nexus threat actors. Tracked under the activity clusters PurpleHaze and ShadowPad, these operations spanned from July 2024 to March 2025, affecting over 70 organizations worldwide across sectors like government, media, manufacturing, finance,…
-
Over 70 Organizations Across Multiple Sectors Targeted by China-Linked Cyber Espionage Group
The reconnaissance activity targeting American cybersecurity company SentinelOne was part of a broader set of partially-related intrusions into several targets between July 2024 and March 2025.”The victimology includes a South Asian government entity, a European media organization, and more than 70 organizations across a wide range of sectors,” security researchers Aleksandar Milenkoski and Tom First…
-
Organised Crime Gang Steals £47 Million from UK Tax Office in Phishing Scam
An organised crime gang has stolen £47 million ($64 million) from the UK’s tax office by hacking into over 100,000 customer accounts and fraudulently claiming government payments. His Majesty’s Revenue and Customs (HMRC) confirmed the breach but assured taxpayers that no individuals lost money. According to HMRC, criminals used stolen personal data, likely obtained through…
-
Kazakhstan detains over 140 for allegedly selling citizens’ data via Telegram channels
Authorities said they busted a ring responsible for illegally extracting citizens’ data from Kazakhstan’s government networks and distributing it through Telegram and other ways. First seen on therecord.media Jump to article: therecord.media/kazakhstan-arrests-suspects-stolen-data-network
-
APT41 Hackers Leverage Google Calendar for Malware C2 in Attacks on Government Entities
The Chinese state-sponsored threat actor APT41, also known as BARIUM, Wicked Panda, and Brass Typhoon, has been reported to exploit Google Calendar as a command-and-control (C2) mechanism in a recent campaign targeting a Taiwanese government website. This sophisticated group, active since at least 2012, is notorious for blending cyber espionage with financially motivated cybercrime, hitting…
-
Over 1,000 Employees Departed CISA Since Trump Administration Began
The Cybersecurity and Infrastructure Security Agency (CISA), the U.S. government’s frontline civilian cybersecurity force, has lost nearly one-third of its workforce”, roughly 1,000 employees”, since the start of the current Trump administration, according to multiple sources and internal communications. This exodus, driven by buyouts, early retirements, and layoffs, has left the agency with approximately 2,200…
-
New Zealand Government Mandates DMARC Under New Secure Email Framework
New Zealand mandates DMARC enforcement under its new Secure Government Email framework. Learn what this means and how agencies can ensure compliance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/new-zealand-government-mandates-dmarc-under-new-secure-email-framework/
-
Avoid FedRAMP Delays: 7 Common SSP Mistakes to Fix
Seeking a FedRAMP authority to operate is a critical part of any cloud service looking to work with the government in an official capacity. It’s required if you are going to handle controlled unclassified information on behalf of the government or its contractors, and since the requirements trickle down, you don’t even necessarily have to……
-
The Dark Web’s Currency of Choice: Stolen Data
In the 19th century, opium was a highly sought-after commodity that fueled entire economies and conflicts. Today, data holds that same level of value, perhaps even more. It is the currency of power and influence wielded by governments, corporations, and cybercriminals alike. Whether used legitimately or illicitly, data’s worth remains undeniable. This article explores the…
-
Signal Phishing Alert: Sophisticated Campaign Targets Armenian Civil Society Government
The post Signal Phishing Alert: Sophisticated Campaign Targets Armenian Civil Society Government appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/signal-phishing-alert-sophisticated-campaign-targets-armenian-civil-society-government/
-
US Supreme Court Grants DOGE Unfettered Access to SSA Systems
Unsigned Order Overturns District Court Injunction. The U.S. Supreme Court granted Friday a Trump administration cost-cutting effort known as the Department of Government Efficiency access to data on Americans held at the Social Security Administration. Two liberal justices accused their conservative colleagues of a double standard. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/us-supreme-court-grants-doge-unfettered-access-to-ssa-systems-a-28614
-
Cybersecurity Snapshot: Experts Issue Best Practices for Migrating to Post-Quantum Cryptography and for Improving Orgs’ Cyber Culture
Tags: access, attack, best-practice, business, cio, ciso, communications, computer, computing, conference, corporate, crypto, cryptography, cyber, cybersecurity, data, defense, email, encryption, finance, government, group, ibm, identity, incident, incident response, infrastructure, jobs, lessons-learned, metric, microsoft, mitre, monitoring, nist, risk, service, strategy, technology, threat, tool, training, update, vulnerability, vulnerability-management, warfareCheck out a new roadmap for adopting quantum-resistant cryptography. Plus, find out how your company can create a better cybersecurity environment. In addition, MITRE warns about protecting critical infrastructure from cyber war. And get the latest on exposure response strategies and on CISO compensation and job satisfaction. Dive into five things that are top of…
-
U.S. Offers $10M Bounty for Information on RedLine Malware Creator
The US State Department has announced a reward of up to $10 million for information leading to the identification or location of Maxim Alexandrovich Rudometov, the alleged developer and administrator of the notorious RedLine infostealer malware. This action, under the Rewards for Justice program, specifically targets individuals acting under the direction of foreign governments who…
-
DOJ moves to claim $7.74 million tied to North Korean IT worker scheme
The U.S. government wants to confiscate millions of dollars in funds tied to illegal employment of North Korean IT workers at American companies. First seen on therecord.media Jump to article: therecord.media/north-korea-it-worker-scams-doj-civil-forfeiture-claim
-
Leadership, Trust, and Cyber Hygiene: NCSC’s Guide to Security Culture in Action
The UK’s National Cyber Security Centre (NCSC) has introduced a set of six core principles to help organizations embed strong cybersecurity practices into their everyday operations. Developed in collaboration with government and industry leaders, this guidance aims to instill a lasting culture of security”, one that prioritizes both technical controls and human behaviors to achieve…
-
ANY.RUN Empowers Government Agencies with Real-Time Threat Detection
Tags: breach, cyber, cyberattack, detection, government, infrastructure, malicious, malware, phishing, tactics, threatGovernment agencies worldwide are facing an unprecedented wave of cyberattacks, with adversaries employing advanced tactics to breach critical infrastructure and steal sensitive data. Recent case studies analyzed using the ANY.RUN malware analysis platform reveal how attackers are leveraging phishing, domain spoofing, and malicious document delivery to target public sector organizations. These incidents highlight the urgent…
-
$17 Million Black Market Empire Crushed in Cybercrime Sting
The U.S. government has seized approximately 145 domains associated with the BidenCash marketplace and other criminal marketplaces, effectively dismantling one of the most notorious darknet operations for trafficking stolen credit card data and personal information. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/bidencash-marketplace-domains-seized/
-
Iranian Espionage Group Caught Spying on Kurdish Officials
BladedFeline Hackers Spying on Kurdish Officials Since at Least 2017. An Iranian state espionage group stayed hidden for more than half-a-decade until security researchers spotted it in 2023, researchers said Thursday in a report detailing a growing arsenal of hacking tools it deployed against Kurdish and Iraqi government officials. First seen on govinfosecurity.com Jump to…
-
Iranian APT ‘BladedFeline’ Remains Hidden in Networks for 8 Years
ESET researchers have uncovered the persistent activities of BladedFeline, an Iranian-aligned Advanced Persistent Threat (APT) group, which has maintained covert access to the networks of Kurdish and Iraqi government officials for nearly eight years. First identified in 2017 through attacks on the Kurdistan Regional Government (KRG), BladedFeline has since evolved into a sophisticated cyberespionage entity,…
-
Trump’s national cyber director nominee grilled about his resume, proposed spending cuts
In his Senate confirmation hearing, national cyber director nominee Sean Cairncross faced questions about his lack of cybersecurity experience and how the government would operate with vastly reduced cybersecurity resources. First seen on therecord.media Jump to article: therecord.media/sean-cairncross-oncd-nominee-senate-confirmation-hearing
-
Top US cyber officials face divergent paths after Senate confirmation
Tags: china, cisa, cyber, cybersecurity, government, incident, incident response, iran, jobs, russia, strategy, technology, threatDivergent strategies moving forward: The road ahead appears paved with opportunity for Cairncross, while Plankey faces a narrower path of contraction and clean-up at CISA.”This is a perfect opportunity for the NCD [national cyber director] position to work,” Center on Cyber and Technology Innovation’s Montgomery said. “You have a National Security Council focused on the…
-
Iran-linked hackers target Kurdish and Iraqi officials in long-running cyberespionage campaign
The group has been operating since at least 2017, initially breaching systems belonging to the Kurdistan Regional Government and have expanded their reach to the Central Government of Iraq as well as a telecommunications provider in Uzbekistan. First seen on therecord.media Jump to article: therecord.media/iran-linked-hackers-target-kurdish-iraq-cyber-espionage