Tag: government
-
Apple Taking Legal Action Against UK Over Backdoor Demands
Apple told TechRepublic it is “gravely disappointed” to remove Advanced Data Protection in the U.K., as it fights government demands for an iCloud backdoor. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/apple-legal-action-uk-backdoor/
-
Apple takes UK government to court over ‘backdoor’ order
A first-of-its-kind legal challenge set to be heard this month, per reports First seen on theregister.com Jump to article: www.theregister.com/2025/03/05/apple_reportedly_ipt_complaint/
-
Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants
The threat actor known as Lotus Panda has been observed targeting government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong, and Taiwan with updated versions of a known backdoor called Sagerunex.”Lotus Blossom has been using the Sagerunex backdoor since at least 2016 and is increasingly employing long-term persistence command shells and developing…
-
Apple is challenging U.K.’s iCloud encryption backdoor order
Apple is challenging a U.K. Government data access order in the Investigatory Powers Tribunal (IPT), the Financial Times reports. The order targeted iCloud backups that are protected by end-to-end encryption. Last month, press leaks revealed the existence of the January order asking Apple to build a backdoor in iCloud’s encrypted backups. U.K. officials are exercising…
-
Microsoft pushes a lot of products on users, but here’s one cybersecurity can embrace
Tags: access, attack, authentication, best-practice, business, cisa, cloud, cybersecurity, data-breach, defense, governance, government, identity, mfa, microsoft, monitoring, password, phishing, service, siemEntra monitors for suspicious activity: Entra monitors for activities that are more than likely being carried out by attackers. So, for example, the following actions are monitored:Users with leaked credentials.Sign-ins from anonymous IP addresses.Impossible travel to atypical locations.Sign-ins from infected devices.Sign-ins from IP addresses with suspicious activity.Sign-ins from unfamiliar locations.You can set a threshold for…
-
Reported US Cyber Pause on Russia Raises Questions, Concerns
Hiatus Could Embolden Moscow. Reports suggesting the U.S. federal government is going soft on Russia in cyberspace sent shockwaves through the cybersecurity community. Resuming computer network attacks and other exploitation efforts after a pause isn’t as simple as flipping a switch. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/reported-us-cyber-pause-on-russia-raises-questions-concerns-a-27643
-
British Tech Industry Backs UK Proposal on Software Security
Code of Practice for Software Vendors Sets Baseline Security Expectations. A British government proposal to strengthen software supply chain security received positive feedback from vendors who said voluntary best practices could strengthen cyber defenses. The guidelines suggest requiring multifactor authentication for developers and timely vulnerability patching. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/british-tech-industry-backs-uk-proposal-on-software-security-a-27645
-
Enhancing security with Microsoft’s expanded cloud logs
Nation-state-sponsored hacking stories are a big part of everyone’s favourite Hollywood movies”‰”, “‰that is, until it becomes a real-life story of our own compromised personal or corporate sensitive data ending up on the dark web or in hackers’ hands. In real life, cyber espionage groups’ activities trigger stringent security enforcement. First in the government sector,…
-
CISA, VMware warn of new vulnerabilities being exploited by hackers
Three product lines from technology giant VMware, ESXI, Workstation and Fusion, have patches for vulnerabilities that the company and the federal government have said are being exploited by hackers. First seen on therecord.media Jump to article: therecord.media/vmware-exploited-vulnerabilities-esxi-workstation-fusion
-
Iran linked to more than 20 plots to kill or kidnap British citizens and residents
The Iranian regime “has become increasingly emboldened, asserting itself more aggressively,” including kidnapping and murder plots, said Dan Jarvis, the U.K. government’s security minister. First seen on therecord.media Jump to article: therecord.media/iran-britain-kidnapping-murder-plots-dan-jarvis-mi5
-
Focus on Elon Musk’s algorithms, not his words, says France’s disinformation agency
Anne-Sophie Dhiver, the deputy head of the French government agency Viginum, spoke to Recorded Future News about why and how her agency was addressing the threat of disinformation. First seen on therecord.media Jump to article: therecord.media/focus-on-musk-algorithms-not-words-france-disinfo-agency-interview
-
Polish space agency says it’s investigating a cyberattack
Poland’s space agency (POLSA) says it is working to restore services following a cybersecurity incident. POLSA, the Polish government agency responsible for the country’s space activities, said in a post on X that it had “immediately disconnected” its network from the internet after detecting the cyberattack on Sunday. POLSA’s website remains offline at the time…
-
Google, Meta, and Apple Power the World’s Biggest Surveillance System
Imagine a government that tracks your daily movements, monitors your communications, and catalogs your digital habits. While this conjures images of authoritarian regimes, a parallel reality exists in the United States, where law enforcement agencies leverage the vast data reservoirs of Big Tech companies to construct intrusive profiles of citizens. Over the past decade, Google,…
-
CISA Urges Government to Patch Exploited Cisco, Microsoft Flaws
CISA has added five more CVEs into its known exploited vulnerabilities catalog First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-govt-patch-exploited-cisco/
-
UK Lawmakers Don’t Hear Fervor for Ransomware Payment Ban
Committee Witnesses Favor Resilience Over Bans. The British government should focus on building operational resilience rather than imposing ransom payment bans, security experts told a parliamentary committee. The British government in January floated a ban on public sector and critical infrastructure owners paying digital extortion. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/uk-lawmakers-dont-hear-fervor-for-ransomware-payment-ban-a-27636
-
Privacy Roundup: Week 9 of Year 2025
Tags: access, android, apple, attack, backdoor, breach, browser, cctv, control, cyber, cybersecurity, data, data-breach, encryption, endpoint, exploit, firmware, flaw, government, group, hacker, Internet, jobs, law, leak, malware, office, password, phishing, privacy, regulation, router, scam, service, software, switch, technology, threat, tool, update, vpn, vulnerabilityThis is a news item roundup of privacy or privacy-related news items for 23 FEB 2025 – 1 MAR 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
-
Military, Government, Face Escalating APT Attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/military-government-face-escalating-apt-attacks
-
Military, government sectors face escalating APT attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/military-government-sectors-face-escalating-apt-attacks
-
US Cybercom, CISA retreat in fight against Russian cyber threats: reports
Tags: apt, blizzard, china, cisa, cyber, cybersecurity, data, government, group, hacker, infrastructure, international, iran, lockbit, microsoft, ransomware, risk, risk-management, russia, threatPurported shift at CISA away from reporting on Russian threats: Shortly after The Record issued its report, The Guardian reported that the US Cybersecurity and Infrastructure Security Agency (CISA) sent an internal memo setting out new priorities for the agency, including China but excluding Russia. One source said analysts at the agency were verbally informed…
-
Several local governments struggling with cyberattacks limiting services
Government services offered by one of the largest counties in Maryland are still being limited more than a week after it was targeted by a cyberattack. First seen on therecord.media Jump to article: therecord.media/local-govs-cyberattacks-limiting-services
-
US said to halt offensive cyber operations against Russia
The reported policy shift comes as the U.S. government signals a change in its threat assessment of Russia First seen on techcrunch.com Jump to article: techcrunch.com/2025/03/03/us-said-to-halt-offensive-cyber-operations-against-russia/
-
US Seizes $31 Million Worth of Crypto Stolen in Uranium Finance Hack
The US government has seized roughly $31 million in cryptocurrency stolen in 2021 from Uranium Finance. The post US Seizes $31 Million Worth of Crypto Stolen in Uranium Finance Hack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/us-seizes-31-million-worth-of-crypto-stolen-in-uranium-finance-hack/
-
Top Data Breaches of February 2025
February 2025 saw a series of high-impact data breaches affecting industries ranging from healthcare and finance to cloud services and government agencies. These incidents exposed sensitive data, disrupted operations, and… First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/top-data-breaches-of-february-2025/
-
Space Pirates Hackers Attacking IT Organizations With LuckyStrike Using OneDrive
Tags: attack, backdoor, cyber, cyberattack, cybersecurity, government, group, hacker, malware, russia, threatA recent investigation by cybersecurity experts has unveiled a series of advanced cyberattacks orchestrated by the notorious Advanced Persistent Threat (APT) group known as >>Space Pirates.
-
Lotus Blossom Hackers Target Southeast Asia with Sagerunex Backdoor
A sophisticated cyber espionage operation linked to the Lotus Blossom group has been discovered targeting government, manufacturing, telecommunications, First seen on securityonline.info Jump to article: securityonline.info/lotus-blossom-hackers-target-southeast-asia-with-sagerunex-backdoor/
-
CMMC vs FedRAMP: Do They Share Reciprocity?
Throughout this blog, we often write about both FedRAMP and CMMC as cybersecurity frameworks applied to the federal government and its contractors. These frameworks share a lot of the same DNA stemming from the same resources, and they share the same goal of making the federal government more secure. One significant question you may have,……