Tag: government
-
Neue EU-Schwachstellen-Datenbank geht an den Start
Tags: bug, cve, cvss, cybersecurity, cyersecurity, governance, government, infrastructure, mitre, nis-2, risk, sap, software, technology, tool, vulnerabilityDie neue EU-Schwachstellen-Datenbank EUVD soll das CVE-Programm ergänzen.Seit dieser Woche verfügt die Technologiebranche über eine neue Datenbank, um die neuesten Sicherheitslücken in Software zu überprüfen: die European Union Vulnerability Database (EUVD). Das Programm wurde von der Europäischen Agentur für Cybersicherheit (ENISA) zur Umsetzung der EU-Cybersicherheitsrichtlinie NIS2 eingerichtet.Hier stellt sich die Frage: Warum braucht es ein…
-
CISA adds the notorious TeleMessage flaw to KEV list
Government officials are especially vulnerable: “This vulnerability was most likely added to the KEV list due to the reported use of TeleMessage by government officials,” Thomas Richards, infrastructure security practice director at Black Duck, told CSO in a comment.TM SGNL first made headlines in March, when senior administration officials faced backlash after Waltz mistakenly added…
-
CVE Foundation eyes year-end launch following 11th-hour rescue of MITRE program
An apparent bureaucratic contract snafu has sparked a fire under experts trying to save the CVE program from the precarity of a single government funder. One rival to the existing program says it is ready to launch in December. First seen on cyberscoop.com Jump to article: cyberscoop.com/cve-program-funding-crisis-cve-foundation-mitre/
-
Job Seekers Targeted as Scammers Pose as Government Agencies on WhatsApp
Scammers impersonate government agencies on WhatsApp to target job seekers with fake offers, phishing sites, and identity theft… First seen on hackread.com Jump to article: hackread.com/job-seekers-targeted-scammers-government-whatsapp/
-
Job Seekers Targeted as Scammers Pose as Government on WhatsApp
Scammers impersonate government agencies on WhatsApp to target job seekers with fake offers, phishing sites, and identity theft… First seen on hackread.com Jump to article: hackread.com/job-seekers-targeted-scammers-government-whatsapp/
-
Hacktivists Make Little Impact During India-Pakistan Conflict
While hacktivists claimed more than 100 successful attacks against Indian government, education, and military targets, the attacks were overblown in most cases and often did not even happen. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/hacktivists-little-impact-during-india-pakistan-conflict
-
China helps North Korean operatives land IT roles, bypassing sanctions
One Chinese company with at least 35 affiliates has shipped IT equipment to a North Korean government-backed organization. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/north-korea-it-worker-scam-china-research/748009/
-
MetTel Taps Netskope for Managed SASE Services Across Enterprise and Government
First seen on scworld.com Jump to article: www.scworld.com/news/mettel-taps-netskope-for-managed-sase-services-across-enterprise-and-government
-
North Korea ramps up cyberspying in Ukraine to assess war risk
The state-backed North Korean threat group Konni (Opal Sleet, TA406) was observed targeting Ukrainian government entities in intelligence collection operations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/north-korea-ramps-up-cyberspying-in-ukraine-to-assess-war-risk/
-
GovDelivery, an email alert system used by governments, abused to send scam messages
The state of Indiana attributed the scam emails to a compromised contractor’s account. First seen on techcrunch.com Jump to article: techcrunch.com/2025/05/13/government-email-alert-system-govdelivery-used-to-send-scam-messages/
-
Government email alert system GovDelivery used to send scam messages
The state of Indiana attributed the scam emails to a compromised contractor’s account. First seen on techcrunch.com Jump to article: techcrunch.com/2025/05/13/government-email-alert-system-govdelivery-used-to-send-scam-messages/
-
Gov.uk One Login loses certification for digital identity trust framework
The government’s flagship digital identity system has lost its certification against the government’s own digital identity system trust framework First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623835/Govuk-One-Login-loses-certification-for-digital-identity-trust-framework
-
Australian data breaches hit record high in 2024
More than 1,100 data breaches were reported in Australia last year, a 25% jump from 2023, prompting calls for stronger security measures across businesses and government agencies First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366623874/Australian-data-breaches-hit-record-high-in-2024
-
China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures
Tags: access, api, apt, attack, authentication, backdoor, backup, breach, business, china, cloud, control, cve, cyber, data, data-breach, detection, dns, encryption, endpoint, espionage, exploit, finance, firewall, fortinet, google, government, group, infection, infrastructure, intelligence, Internet, ivanti, linux, malicious, malware, mandiant, military, network, open-source, programming, rat, remote-code-execution, reverse-engineering, risk, rust, sap, service, strategy, tactics, threat, tool, update, vmware, vpn, vulnerability, windows, zero-dayExecutive Summary EclecticIQ analysts assess with high confidence that, in April 2025, China-nexus nation-state APTs (advanced persistent threat) launched high-temp exploitation campaigns against critical infrastructure networks by targeting SAP NetWeaver Visual Composer. Actors leveraged CVE-2025-31324 [1], an unauthenticated file upload vulnerability that enables remote code execution (RCE). This assessment is based on a publicly…
-
DPRK-Backed TA406 Targets Ukraine With Malware Campaigns
Cyber espionage campaign linked to North Korean actor TA406 targeted Ukrainian government entities First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/dprk-backed-ta406-targets-ukraine/
-
Alabama says ‘cybersecurity event’ could disrupt state government services
Alabama Governor Kay Ivey said the state is responding to a “cybersecurity event” that has prompted government IT staff to work “around-the-clock to identify and mitigate impacts.” First seen on therecord.media Jump to article: therecord.media/alabama-says-cyber-event-could-cause-disruptions
-
North Korean hackers target Ukrainian government in new espionage campaign
The latest wave of activity in Ukraine suggests that Pyongyang is seeking to “better understand the appetite to continue fighting against the Russian invasion” and “the medium-term outlook of the conflict,” according to the latest report by cybersecurity firm Proofpoint. First seen on therecord.media Jump to article: therecord.media/north-korea-hackers-target-ukraine-to-understand-russian-war-efforts
-
North Korean Konni APT Targets Ukraine with Malware to track Russian Invasion Progress
Tags: apt, government, group, intelligence, korea, malware, north-korea, phishing, russia, threat, ukraineThe North Korea-linked threat actor known as Konni APT has been attributed to a phishing campaign targeting government entities in Ukraine, indicating the threat actor’s targeting beyond Russia.Enterprise security firm Proofpoint said the end goal of the campaign is to collect intelligence on the “trajectory of the Russian invasion.””The group’s interest in Ukraine follows historical…
-
UK Considers New Enterprise IoT Security Law
The UK government wants to hear feedback on a possible new standard or legislation to improve enterprise IoT security First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/government-enterprise-iot-security/
-
Researchers Uncover Remote IT Job Fraud Scheme Involving North Korean Nationals
The United States indicted fourteen North Korean nationals for orchestrating a sophisticated scheme to secure remote IT jobs at American companies and nonprofits using stolen identities. This operation, which has funneled at least $88 million USD to the North Korean government (DPRK) over the past six years, has raised alarm across industries, with Fortune 500…
-
Poland to shut Russian consulate after blaming Kremlin spies for arson attack on Warsaw mall
“We will catch them all!” said Polish Prime Minister Donald Tusk as the country’s government moved to close a Russian consulate after accusing Kremlin-backed operators of being behind a Warsaw mall fire. First seen on therecord.media Jump to article: therecord.media/poland-shuts-russian-consolate-blames-kremlin-warsaw-fire
-
The rise of vCISO as a viable cybersecurity career path
Tags: advisory, business, ceo, cio, ciso, compliance, computer, control, country, cyber, cybersecurity, government, grc, group, guide, healthcare, incident response, infrastructure, ISO-27001, jobs, mobile, network, nist, risk, risk-assessment, risk-management, service, skills, strategy, technology, tool, trainingDamon Petraglia, vCISO and CISO on demand Blue Mantis Damon Petraglia A long-time cybersecurity pro with chops built up in the federal government world and through forensic investigation work, Damon Petraglia works as a vCISO and CISO on demand for the IT services firm Blue Mantis.”Where I am today as a vCISO is a culmination…
-
US govt’s science foundation purges 37 divisions, equity unit among casualties
DEI another day: Trump priorities bite as $1B in grants vanish, layoffs loom First seen on theregister.com Jump to article: www.theregister.com/2025/05/09/nsf_axes_37_division/
-
The Legacy Cyber Threat: Why We Must Prioritize Modernization
Most governments struggle with replacing legacy systems for a variety of reasons. But some people claim legacy mainframes can be just as secure as modern ones. So how big is the legacy cyber threat? First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/the-legacy-cyber-threat-why-we-must-prioritize-modernization/
-
Sicherheit ist mehr als Verschlüsselung: Drei Tipps, wie Unternehmen ihre Kommunikation sicherer machen
Der aktuelle Signal-Leak der US-Regierung zeigt ein grundsätzliches Problem: Sicherheit in der Kommunikation ist nicht nur äußerst wichtig, sondern auch sehr komplex. Wird sie missachtet, entstehen Image- und Vertrauensverluste oder finanzielle oder Wettbewerbsrisiken. Wie können sich Unternehmen schützen und vorbereiten? Was sollten sie beachten? Wildix, Anbieter von Unified Communications as a Service, gibt drei Praxistipps……
-
The CMMC Rev 2 to Rev 3 Memo: What’s Changed?
The world of cybersecurity is always changing, with rapid evolution in both threat and response creating a continual churn in knowledge, technology, and standards. Frameworks meant to help protect systems and businesses, especially the government, tend to be comparatively slow. It takes a lot of momentum and effort to get a new framework iteration through……
-
CyberUK 2025: Resilience and APT Threats Loom Large
Government Officials Sound ‘Wake Up’ Alarms. A rash of cyber incidents felt by British businesses add up to a wake-up call that cybersecurity is an absolute priority, top government officials warned during an annual conference hosted by the National Cyber Security Centre. The NCSC unveiled cyber resilience measures timed for the conference. First seen on…
-
Significant Gap Exists in UK Cyber Resilience Efforts
Threat Outpaces Government’s Ability to Keep Pace, Says Parliamentary Committee. Cyberthreats have evolved beyond the British government’s ability to keep pace, warned a Parliamentary committee in a report highlighting lack of prioritization and a deficiency in civil service cyber skills. The country has felt a series of stinging cyberattacks over the last few years. First…
-
A cyber attack briefly disrupted South African Airways operations
A cyberattack briefly disrupted South African Airways’ website, app, and systems, but core flight operations remained unaffected. South African Airways (SAA) is the national flag carrier of South Africa, the airline is wholly owned by the South African government and has subsidiaries including SAA Technical and Air Chefs. A cyberattack hit South African Airways, briefly…