Tag: government
-
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads.According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments, technology companies, and hotels since February 2026.”The technique’s appeal is…
-
Earth Berberoka-Linked Hackers Target Brazil With Linux Malware and SEO Poisoning
A Chinese-speaking cybercrime cluster linked to the Earth Berberoka threat actor has compromised Brazilian government and educational web servers to conduct large-scale SEO poisoning and online-gambling fraud. The operation has been active since mid-2025 and represents a notable shift in Brazil’s threat landscape. Rather than deploying the country’s more familiar banking malware, the attackers are…
-
Google Unveils Gemini 3.8 Flash Cyber for Autonomous Vulnerability Discovery and Automated Patching
Google has introduced Gemini 3.8 Flash Cyber, a specialized AI model focused on cybersecurity. This model is designed to autonomously identify software vulnerabilities, generate code fixes, and validate patches before deployment. Access to this model is restricted to vetted defenders through Google’s new Fairwind Program, which aims to provide advanced cyber capabilities to government agencies,…
-
Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access
Google launched a new program Wednesday that gives select organizations access to a more capable version of Gemini designed to find and patch software vulnerabilities. The Fairwind Program combines Google’s new Gemini 3.8 Flash Cyber model with CodeMender, its AI agent for vulnerability remediation. Google said Fairwind initially includes government agencies, Google Cloud customers and..…
-
Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access
Google launched a new program Wednesday that gives select organizations access to a more capable version of Gemini designed to find and patch software vulnerabilities. The Fairwind Program combines Google’s new Gemini 3.8 Flash Cyber model with CodeMender, its AI agent for vulnerability remediation. Google said Fairwind initially includes government agencies, Google Cloud customers and..…
-
Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access
Google launched a new program Wednesday that gives select organizations access to a more capable version of Gemini designed to find and patch software vulnerabilities. The Fairwind Program combines Google’s new Gemini 3.8 Flash Cyber model with CodeMender, its AI agent for vulnerability remediation. Google said Fairwind initially includes government agencies, Google Cloud customers and..…
-
Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access
Google launched a new program Wednesday that gives select organizations access to a more capable version of Gemini designed to find and patch software vulnerabilities. The Fairwind Program combines Google’s new Gemini 3.8 Flash Cyber model with CodeMender, its AI agent for vulnerability remediation. Google said Fairwind initially includes government agencies, Google Cloud customers and..…
-
Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access
Google launched a new program Wednesday that gives select organizations access to a more capable version of Gemini designed to find and patch software vulnerabilities. The Fairwind Program combines Google’s new Gemini 3.8 Flash Cyber model with CodeMender, its AI agent for vulnerability remediation. Google said Fairwind initially includes government agencies, Google Cloud customers and..…
-
Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access
Google launched a new program Wednesday that gives select organizations access to a more capable version of Gemini designed to find and patch software vulnerabilities. The Fairwind Program combines Google’s new Gemini 3.8 Flash Cyber model with CodeMender, its AI agent for vulnerability remediation. Google said Fairwind initially includes government agencies, Google Cloud customers and..…
-
Lords considers government emergency AI kill switch
An amendment to the UK’s Cyber Security and Resilience Bill will give the government powers to switch off AI systems or data centres in an emergency First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366650054/Lords-considers-government-emergency-AI-kill-switch
-
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program.”The Fairwind Program gives high-priority defenders (like governments, healthcare providers, and telecommunications services) early access to advanced models that help…
-
Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks
Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by businesses, schools, and government offices to remotely install software and run scripts across their networks. According to the security firm, threat actors sent victims phishing emails disguised as invoices, tax documents, financial records, and event…
-
Hackers Abuse Legitimate IT Management Tool to Sneak Into Business Networks
Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by businesses, schools, and government offices to remotely install software and run scripts across their networks. According to the security firm, threat actors sent victims phishing emails disguised as invoices, tax documents, financial records, and event…
-
Government Cybersecurity
Government organizations are responsible for providing essential public services, managing sensitive information, maintaining critical infrastructure, and supporting citizens and businesses. As governments continue to digitize these services, their dependence on technology has increased significantly. Government agencies now operate extensive digital… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/government-cybersecurity/
-
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run by Brazilian government and educational institutions, and using them to divert visitors to attacker-controlled pages promoting online gambling and sports betting.Check Point Research said it has tracked the campaign since mid-2025.The modules First seen on…
-
Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
Gambling Goblin compromised Brazilian government sites to drive gambling traffic through SEO fraud First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/gambling-goblin-brazilian/
-
427 or 4 Devices?: Measuring Internet-Exposed Industrial Infrastructure in the UK
By Adrian Cheek, Senior Cybercrime Researcher On August 22, 2026, The Telegraph reported that a small UK power generator had been shut down for four days in July following a cyberattack by hackers linked to Iran. The government confirmed that… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/427-or-4-devices-measuring-internet-exposed-industrial-infrastructure-in-the-uk/
-
Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon
ey Points Introduction Since mid-2025, Check Point Research has tracked a sustained campaign against Brazilian organizations. The tradecraft points to a Chinese-speaking cybercrime group connected to Earth Berberoka, an actor firstdocumentedtargeting gambling sites across Asia. Once inside a victim, the group deploys a broad Linux toolkit: a custom downloader, several backdoors, and familiar offensive utilities.…
-
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals.The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31.GeoNetwork originated at the United Nations Food and…
-
Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems
Tags: cyber, government, healthcare, infrastructure, kaspersky, malware, microsoft, software, technology, windowsAn active malware campaign that abuses counterfeit download pages for trusted software brands including Microsoft Edge, Kaspersky and Razer to compromise Windows devices. Victims span healthcare, manufacturing, gaming, technology, logistics, government and education, highlighting the broad appeal of software-download lures. Microsoft has not attributed the activity to a nation-state actor, but the campaign’s infrastructure, payload…
-
Cryptography expert: AI could make software too secure, impacting government hacking capabilities
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-could-make-software-too-secure-impacting-government-hacking-capabilities
-
Digital ID challenges remain despite government U-turn, says NAO
While the government may have cancelled its digital ID scheme, challenges such as fragmented data, digital access to public services and public trust remain First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366649801/Digital-ID-challenges-remain-despite-government-U-turn-says-NAO
-
Chancellor unveils plans to entice UK tech startups
The UK government aims to build out home-grown research and development in artificial intelligence and cyber security First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366649878/Chancellor-unveils-plans-to-entice-UK-tech-startups
-
Daily OT Security News: September 1, 2026
This briefing summarizes verified advisories, reporting, legal analysis, and vendor commentary on operational-technology security issues relevant to OT, ICS, IoT, CPS, and critical”‘infrastructure professionals. UK NCSC warns of increased targeting of operational technology Government advisory (NCSC, 27 August 2026): the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/daily-ot-security-news-september-1-2026/
-
Berlin refuses to be blackmailed after network breach
Berlin’s state government has confirmed an extortion attempt following a data theft from its administrative network in August. Governing Mayor Kai Wegner and Interior … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/01/berlin-data-breach-rhysida-ransomware/
-
Berlin says it won’t pay ransom after hackers steal government data
Governing Mayor Kai Wegner said on Friday that Berlin had received an extortion demand following the cyberattack, which was discovered in mid-August. First seen on therecord.media Jump to article: therecord.media/berlin-says-it-wont-pay-ransom-after-hackers-steal-gov-data
-
How AI could make it harder for governments to use hacking tools
AI is proving effective at finding and exploiting vulnerabilities. Some say this will make it harder for governments to use hacking tools and spyware and could reignite calls to backdoor devices. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/31/how-ai-could-make-it-harder-for-governments-to-use-hacking-tools/
-
Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations
BlueDelta (APT28) uses webhook.site and Microsoft Edge to hide HOOKEDGE espionage traffic targeting European governments. Recorded Future’s Insikt Group documented a campaign by BlueDelta, the Russian GRU-linked group that overlaps with the group APT28, running an entire espionage operation against European government targets using webhook.site, a service built for developers to test HTTP requests, as…
-
Suspected Iran-Linked Cyberattack Knocks UK Power Plant Offline for Four Days
A cyber incident reportedly forced a small UK power generation facility offline for about four days in July 2026. While the activity has been linked in reporting to Iran-affiliated hackers, the UK government and National Cyber Security Centre (NCSC) have not formally attributed the incident to Iran or any named threat group. The event became…
-
BlueDelta Targets Defense and Diplomatic Organizations With HOOKEDGE Malware
Russian state-linked threat actor BlueDelta has launched a renewed espionage campaign against defense manufacturing, government, and diplomatic organizations in Romania, Spain, and Türkiye using a lightweight Windows backdoor dubbed HOOKEDGE. The activity, tracked from late September 2025 through early April 2026, relied on macro-enabled Microsoft Word documents and legitimate webhook infrastructure to establish access, execute…