The Homeland Security Committee also voted out bills addressing pipeline cybersecurity and terrorists’ use of AI.
The post House panel approves cyber information sharing, grant legislation as expiration deadlines loom appeared first on CyberScoop.
Apitor collected data without informing parents or asking for permission, the FTC said, violating federal parental consent requirements.
The post FTC announces settlement with toy robot makers that tracked location of children appeared first on CyberScoop.
The critical, actively exploited zero-day vulnerabilities affect the Linux kernel and Android runtime.
The post Google patches two Android zero-days, 120 defects total in September security update appeared first on CyberScoop.
In a 2-1 decision, an appeals court upheld a 1935 Supreme Court precedent restricting the president’s ability to fire FTC commissioners.
The post Court rules ‘fired’ FTC commissioners be reinstated — again appeared first on CyberScoop.
Salesloft said the AI chat agent for sales and leads will be taken offline, as investigations into the attack spree widen and reveal more victims.
The post Salesloft Drift attacks hit Cloudflare, Palo Alto Networks, Zscaler appeared first on CyberScoop.
He takes over a key leadership role in a position that’s seen rapid turnover over the past year.
The post CISA taps Nicholas Andersen for executive assistant director of cybersecurity appeared first on CyberScoop.
An independent testing firm found that SlashNext’s product has a 100% detection rate for business email compromise and QR code attacks.
The post Varonis buys AI email security firm SlashNext appeared first on CyberScoop.
Ianis Aleksandrovich Antropenko allegedly committed ransomware attacks from 2018 to 2022. He’s been out on bond since his arrest almost a year ago, despite multiple run-ins with police.
The post Prolific Russian ransomware operator living in California enjoys rare leniency awaiting trial appeared first on CyberScoop.
Workado publicly claimed its AI content detector could accurately determine whether a piece of text was generated by AI in 98% of cases. The FTC said its "no better than a coin flip."
The post Workado settles with FTC over allegations it inflated its AI detectors’ capabilities appeared first on CyberScoop.
Jason Bilnoski with the FBI’s cyber division told CyberScoop that investigators seized on the mistakes of companies China has used in its widespread cyberespionage.
The post Top FBI official says Chinese reliance on domestic firms for hacking is a weakness appeared first on CyberScoop.
Researchers said Google Workspace customers were hit, and noted other platforms are impacted as well. Fresh evidence proves impact was not limited to Salesforce, as Salesloft previously claimed.
The post Salesloft Drift compromised en masse, impacting all third-party integrations appeared first on CyberScoop.
A new report from the Brennan Center for Justice says the Trump administration has foreshadowed plans to meddle with mail-in voting, voter rolls and much more.
The post Trump administration setting the stage for elections power grab, voting rights group warns appeared first on CyberScoop.
As the sanctions-evading scheme has grown, so too has the U.S. government’s response.
The post Treasury sanctions North Korea IT worker scheme facilitators and front organizations appeared first on CyberScoop.
The Chinese government-linked hackers were the subject of an alert from U.S. and international partners.
The post Salt Typhoon hacking campaign goes beyond previously disclosed targets, world cyber agencies say appeared first on CyberScoop.
There are still impediments to overcome before companies and agencies can get more broadly aggressive in cyberspace, both legal and commercial.
The post Google previews cyber ‘disruption unit’ as U.S. government, industry weigh going heavier on offense appeared first on CyberScoop.
The financially motivated threat group demonstrates deep knowledge of hybrid cloud environments, which allows it to rapidly steal sensitive data, destroy backups and encrypt systems for ransomware.
The post Microsoft details Storm-0501’s focus on ransomware in the cloud appeared first on CyberScoop.
The vendor, which has been widely targeted, said the memory-overflow vulnerability can result in remote-code execution or denial of service.
The post Citrix NetScaler customers hit by third actively exploited zero-day vulnerability since June appeared first on CyberScoop.
A threat group Google tracks as UNC6395 systematically stole large amounts of data from Salesforce customer instances by using OAuth tokens stolen from Salesloft Drift, researchers said.
The post Hundreds of Salesforce customers impacted by attack spree linked to third-party AI agent appeared first on CyberScoop.
The malware, called PromptLock, essentially functions as a hard-coded prompt injection attack on a large language model, inspecting local filesystems, exfiltrating files and encrypting data.
The post Researchers flag code that uses AI systems to carry out ransomware attacks appeared first on CyberScoop.
The post DOGE employees uploaded Social Security database to ‘vulnerable’ cloud, agency whistleblower says appeared first on CyberScoop.
