CyberScoop

Six weeks of undetected access through a compromised VPN exposes why patching isn't a solution for the organizations already breached.

The post Why patch directives only go so far appeared first on CyberScoop.

Mandiant detailed the incident in a blog post Wednesday, but it’s unclear who was behind it or if they managed to get broad visibility into the victim’s internal traffic.

The post Malicious hackers exploit Cisco zero-day for highest access level at communications service provider appeared first on CyberScoop.

Microsoft, with law enforcement and industry partners, disrupted more than 200 command and control servers for Amadey and StealC, often used in conjunction.

The post In a first, a court takedown goes after two cybercrime tools at once appeared first on CyberScoop.

A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure into a shifting threat.

The post Open-source security is posing challenges governments can’t easily solve appeared first on CyberScoop.

lso Tuesday, the Treasury Department took action against the same Cambodian company, Huione Group, and affiliates.

The post Justice Department seizes infrastructure used by cyber scam and criminal marketplace appeared first on CyberScoop.

Abdellah Belmili allegedly ran two black-market websites selling stolen financial credentials and custom-built phishing kits targeting major American banks, federal prosecutors say.

The post Algerian man charged with running two cybercrime marketplaces appeared first on CyberScoop.

A judge said the administration’s database violates the Privacy Act, the Social Security Act and the Administrative Procedures Act.

The post Court rules SAVE database illegal, orders it dismantled appeared first on CyberScoop.

The orders accelerate the federal government’s transition to post-quantum encryption and will boost the domestic quantum computing industry. 

The post Trump executive orders speed up post-quantum migration, boost industry appeared first on CyberScoop.

The joint warning from Five Eyes countries mirrors what many cybersecurity and AI experts have been saying for the past year. 

The post Intel agencies: Frontier AI models will reshape cybersecurity faster than expected appeared first on CyberScoop.

Cybersecurity firms, researchers and officials took down 106 servers and remediated nearly 15,000 sites that were infected with the malware.

The post Authorities disrupt Evil Corp’s SocGholish botnet appeared first on CyberScoop.

While preventing third parties from profiting off unauthorized deepfakes of artists and performers is a bipartisan concern, some business and digital rights groups are opposed.

The post Congress tees up No FAKES Act, aiming at AI-generated deepfakes appeared first on CyberScoop.

The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.

The post How software development’s speed obsession enabled TeamPCP’s chaos crusade appeared first on CyberScoop.

The consulting giant’s majority stake in Dragos, along with the purchase runZero and NetRise, marks its first major push into operational technology software as AI-driven threats to critical infrastructure intensify.

The post Accenture shells out $4.18B on three companies in big industrial cybersecurity push appeared first on CyberScoop.

Multiple firms have observed active exploitation of the FortiSandbox defects, and warn that the attacks originate from multiple sources, not a single campaign.

The post Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April appeared first on CyberScoop.

Some panned it, some said they needed more information, but caution figured into all of the responses.

The post Lawmakers leery about Trump administration’s Anthropic order appeared first on CyberScoop.

The breakneck speed of model releases may be creating short, silent security gaps as developers must choose between performance and security, according to a new report.

The post AI’s constant patching treadmill can be a security problem appeared first on CyberScoop.

AI bills of materials (AIBOMs), modeled on standards that worked for software, could transform how policymakers understand and regulate AI. A new roadmap outlines what they need to include and how to get there.

The post A case for how to shape ‘ingredient lists’ for AI models appeared first on CyberScoop.

The revelation mirrors an alarming pattern of Chinese espionage groups dropping backdoors into critical infrastructure to intercept research and steal data with national security implications.

The post Google exposes China espionage group that’s been lurking in networks undetected since 2023 appeared first on CyberScoop.

Dozens of practitioners said the decision to place export controls on the foreign use of Fable are misguided, and recent jailbreak reports don’t show the model providing unique hacking capabilities.

The post Cybersecurity experts don’t think Anthropic’s Fable 5 presents a unique threat  appeared first on CyberScoop.

The Commerce Department’s expert control decree led to the company shutting off access to Fable 5 and Mythos 5 worldwide, drawing sharp criticism from researchers and industry analysts.

The post Anthropic disables new models after government calls them a national security concern appeared first on CyberScoop.