Tag: government
-
Securing Canada’s Digital Backbone: Navigating API Compliance
Tags: api, attack, authentication, best-practice, breach, compliance, cyber, data, detection, encryption, flaw, framework, governance, government, infrastructure, monitoring, regulation, risk, service, strategy, threat, vulnerabilityHighlights: Understanding Canadian API Standards: Key principles for secure government API development. Critical Importance of API Security: Why robust protection is vital for citizen data. Compliance and Trust: How adherence to standards builds public confidence. Key Security Considerations: Essential practices for Canadian organizations. Salt Security’s Alignment: How the Salt API Security Platform supports Canadian government…
-
New York’s cyber chief on keeping cities and states safe from cyberattacks
Colin Ahern sat down with Recorded Future News earlier this year to discuss New York’s efforts to protect local governments from ransomware and more. First seen on therecord.media Jump to article: therecord.media/new-york-cyber-chief-on-keeping-cities-states-safe
-
Defense contractor to pay $4.6 million over third-party provider’s security weakness
A technology company based in Cambridge, Massachusetts, is the latest defense contractor to reach a settlement with the U.S. government for failing to meet federal cybersecurity requirements. First seen on therecord.media Jump to article: therecord.media/defense-contractor-to-pay-millions-over-cyber-practices
-
Public Accounts Committee calls out legacy IT
Unsupported and out-of-date software and hardware are hindering the government’s artificial intelligence plans for the public sector First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366621126/Public-Accounts-Committee-calls-out-legacy-IT
-
UK Government’s New Fraud Strategy to Focus on Tech-Enabled Threats
The UK government’s new fraud minister will today announce plans for a newly expanded fraud strategy First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/governments-fraud-strategy/
-
HHS OCR Launches New Round of HIPAA Compliance Audits
Audits Focus on HIPAA Security Rule Provisions Related to Ransomware, Hacking. Federal regulators have quietly resumed compliance audits of HIPAA-regulated organizations. With the surge in ransomware and other hacks reported in recent years, the focus of the audits are on provisions of the HIPAA security rule most relevant to these attacks, said a government official.…
-
Neue VanHelsing-Ransomware breitet sich rasant aus
Tags: authentication, backup, blockchain, dark-web, encryption, extortion, governance, government, linux, ransomware, service, usa, windowsDas neue Ransomware-Programm VanHelsing zielt auf Windows-, Linux-, BSD-, ARM- und ESXi-Systeme.Das neue RaaS-Projekt namens VanHelsing wurde erstmals am16. März von Forschern von CYFIRMA entdeckt, als Angreifer es für Verschlüsselung und doppelte Erpressung nutzten. Da es für Ziele der Gemeinschaft Unabhängiger Staaten (GUS) verboten ist, gehen die Security-Spezialisten davon aus, dass die Hintermänner aus Russland…
-
Privacy-boosting tech could prevent breaches, data misuse with government aid, report says
The New America Open Technology Institute report comes amid DOGE access to sensitive government agency information that has alarmed experts. First seen on cyberscoop.com Jump to article: cyberscoop.com/privacy-boosting-tech-could-prevent-breaches-data-misuse-with-government-aid-report-says/
-
New VanHelsing ransomware claims three victims within a month
Tags: access, authentication, backup, blockchain, control, encryption, government, network, ransom, ransomware, service, windowsSophisticated affiliate program: VanHelsing is a refined ransomware written in C++ and, based on the compilation timestamp observed by Check Point, had claimed its first victim on the same day it got spotted by CYFIRMA.”The ransomware accepts multiple command-line arguments that control the encryption process, such as whether to encrypt network and local drives or…
-
Chinese Hacker Group Tracked Back to iSoon APT Operation
The group, called FishMonger or Aquatic Panda, is working under contract for the Chinese government to steal data from governmental organizations, Catholic charities, NGOs, think tanks, and more. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-espionage-hacker-group-isoon-apt-operation
-
Hackers steal sensitive data from Pennsylvania county during ransomware attack
The government of Union County in central Pennsylvania said a recent ransomware attack exposed information related to law enforcement and other government business. First seen on therecord.media Jump to article: therecord.media/union-county-pennsylvania-ransomware-attack
-
Russian Firm Offers $4 Million for Telegram Exploits
A Russian exploit acquisition firm says it is willing to pay up to $4 million for full-chain exploits targeting the popular messaging service Telegram. The firm, Operation Zero, is known for selling zero-day exploits exclusively to Russian government and private organizations. On March 20, the exploit broker announced on X that it was offering up…
-
FCC Investigates Chinese Entities on US Government’s Prohibited List
The Federal Communications Commission (FCC) has initiated a new investigation into Chinese entities previously identified as national security risks to ensure these companies are not circumventing U.S. regulations. FCC Chairman Brendan Carr announced the move today as the first major initiative led by the newly established Council on National Security within the FCC. The investigation…
-
Encrypted Messaging Apps Promise Privacy. Government Transparency Is Often the Price
Public officials and private citizens are consistently warned about hacking and data leaks, but technologies designed to increase privacy often decrease government transparency. The post Encrypted Messaging Apps Promise Privacy. Government Transparency Is Often the Price appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/encrypted-messaging-apps-promise-privacy-government-transparency-is-often-the-price/
-
NetSfere Launches Quantum-Resilient Messaging Platform for Enterprise and Government Use
NetSfere Integrates ML-KEM and AES into its text, voice and video messaging platform to meet 2027 NSA Quantum Security mandates. The post NetSfere Launches Quantum-Resilient Messaging Platform for Enterprise and Government Use appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/netsfere-launches-quantum-resilient-messaging-platform-for-enterprise-and-government-use/
-
Google, OpenAI target state laws in AI action plan
The federal government is developing plans for AI policy in the U.S. Stakeholders want a federal policy preempting state laws as a top strategic priority. First seen on techtarget.com Jump to article: www.techtarget.com/searchenterpriseai/news/366621060/Google-OpenAI-target-state-laws-in-AI-action-plan
-
Trump shifts cyberattack readiness to state and local governments in wake of info-sharing cuts
Tags: advisory, cio, cisa, ciso, communications, cyber, cyberattack, cybersecurity, election, government, group, infrastructure, intelligence, Internet, metric, office, resilience, risk, russia, strategy, technology, threatCreating a national resilience strategy The EO requires the assistant to the President for national security affairs (APNSA), in coordination with the assistant to the President for economic policy and the heads of relevant executive departments and agencies, to publish within 90 days (by June 17) a National Resilience Strategy that articulates the priorities, means,…
-
Accenture: DOGE’s federal procurement review is hurting our sales
Tags: governmentShare price list slides for top ten consultant to US government First seen on theregister.com Jump to article: www.theregister.com/2025/03/21/accenture_warns_doges_federal_procurement/
-
Was sind die größten Risiken in 2 und in 10 Jahren?
Welche Risiken und Gefahren sind in kurz- und mittelfristig für die Menschheit am bedeutsamsten? Der Global Risk Report (PDF-Download [1]) des Word Economic Forums hat hierzu 900 Persönlichkeiten aus Wirtschaft, Regierung, Wissenschaft und Zivilgesellschaft weltweit befragt. Die wichtigsten kurzfristigen Risiken, die in den nächsten zwei Jahren eine Bedrohung darstellen können, sind im zweiten Jahr in……
-
StateRAMP Fast Track: How to Speed Up Authorization
Governmental cybersecurity is largely focused on federal government agencies. When we talk about FedRAMP, CMMC, DFARS, and other security standards, it’s almost always with an eye toward the governmental agencies and departments that comprise the federal government and the contractors and suppliers that work with them. For private businesses and non-governmental partners, ISO 27001 provides……
-
China Borrows From Feds’ Anti-Hacker Psychological Playbook
Supposed Taiwanese State Hackers Unmasked by China’s Ministry of State Security Nothing beats messing with your adversaries’ heads than taking a page from their psychological operations playbook. Witness China’s Ministry of State Security unmasking four Taiwanese government hackers in a move borrowed from the U.S. government’s playbook. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/china-borrows-from-feds-anti-hacker-psychological-playbook-p-3841
-
DOGE Blocked From Social Security Data Over Privacy Concerns
Judge Orders DOGE Staffers to Delete Social Security Data in Scathing Order. A federal judge has issued a temporary restraining order restricting Department of Government Efficiency employees from accessing data containing personally identifiable information at the Social Security Administration. DOGE essentially engaged in a fishing expedition, the judge wrote. First seen on govinfosecurity.com Jump to…
-
Over 150 US Government Database Servers Vulnerable to Internet Exposure
A recent open-source investigation has uncovered one of the largest exposures of US government data to cyber threats. More than 150 government database servers are currently exposed to the internet, leaving sensitive personal and national security information at an unprecedented risk of cyberattacks. The Scope of the Problem The investigation, conducted using data from Shodan,…
-
China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families
The China-linked advanced persistent threat (APT) group. known as Aquatic Panda has been linked to a “global espionage campaign” that took place in 2022 targeting seven organizations.These entities include governments, catholic charities, non-governmental organizations (NGOs), and think tanks across Taiwan, Hungary, Turkey, Thailand, France, and the United States. The activity, which took place First seen…
-
I-SOON’s ‘Chinese Fishmonger’ APT Targets Government Entities and NGOs
In a recent development, the U.S. Department of Justice unsealed an indictment against employees of the Chinese contractor I-SOON, revealing their involvement in multiple global espionage operations. These operations are attributed to the FishMonger APT group, which is believed to be I-SOON’s operational arm. The group, also known as Earth Lusca, TAG-22, Aquatic Panda, or…
-
CERT-UA Warns of Escalating Cyberattacks Targeting Ukraine’s Defense Sector with DarkCrystal RAT
The Government Computer Emergency Response Team (CERT-UA) issued an important warning about a series of targeted cyberattacks aimed at employees within Ukraine’s defense-industrial complex and members of the Armed Forces. These attacks have been tracked under the iden First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cert-ua-warns-of-darkcrystal-rat/
-
White House Shifting Cyber Risk to State and Local Agencies
Executive Order Shifts Cyber Responsibilities to States, Sparking Security Concerns. The White House is shifting cybersecurity risk management from the federal government to states and local agencies, marking a pivot in how Washington supports the protection of elections and critical infrastructure. Many states lack their own national security and cyber threat intelligence centers. First seen…