The Microsoft-BitLocker episode highlights a larger design problem: when providers retain recovery keys, encryption becomes conditional.
The post If you don’t control your keys, you don’t control your data appeared first on CyberScoop.
Nation-state groups are consistently exploiting the defect to target victims in military, government and technology for espionage.
The post Cybercriminals and nation-state groups are exploiting a six-month old WinRAR defect appeared first on CyberScoop.
The new “Strict Account Settings” toggle extends WhatsApp’s privacy push beyond end-to-end encryption.
The post WhatsApp releases account feature that looks to combat spyware appeared first on CyberScoop.
LevelBlue calls the move “all upside” for MDR customers, stressing that “nothing’s going to change.”
The post LevelBlue scoops up Alert Logic’s managed services from Fortra appeared first on CyberScoop.
A guide aims to help tech buyers navigate their switch to post-quantum encryption, but experts cautioned that most products and backend internet protocols have yet to be updated.
The post CISA publishes a post-quantum shopping list for agencies. Security professionals aren’t sold appeared first on CyberScoop.
Cybercrime groups, including one that identifies as ShinyHunters, are targeting single sign-on services to gain access to victim networks and steal data.
The post A new wave of ‘vishing’ attacks is breaking into SSO accounts in real time appeared first on CyberScoop.
Russell Vought’s updated memo using a common attestation form voluntary. A critic told CyberScoop it’s the “first major policy step back” on cybersecurity under Trump.
The post OMB rescinds ‘burdensome’ Biden-era secure software memo appeared first on CyberScoop.
A threat actor is seeding the internet with AI browser extensions that can intercept a user’s authenticated session tokens and hijack accounts.
The post Some ChatGPT browser extensions are stealing your data appeared first on CyberScoop.
The weekend discussion about the next step of the Pall Mall Process revealed some of the topics rules-writers will have to weigh.
The post Industry, government, nonprofits weigh voluntary rules for commercial hacking tools appeared first on CyberScoop.
The lawsuit comes a day after a TSA official vigorously defended the practice as critical to “national security” in testimony to Congress.
The post Watchdog group sues for TSA data sharing agreement with ICE appeared first on CyberScoop.
Ianis Antropenko, a Russian national living in California, admitted to committing ransomware attacks against at least 50 victims. He faces up to 25 years in jail.
The post Leader of ransomware crew pleads guilty to four-year crime spree appeared first on CyberScoop.
The incidents occurred amid Gaza protests and suggest human rights violations, Citizen Lab said.
The post Researchers find Jordan government used Cellebrite phone-cracking tech against activists appeared first on CyberScoop.
The agency has shed more than 700 jobs since 2025, including 89 at a lab responsible for testing and validating the government’s encryption.
The post NIST officials detail impact of staff cuts on encryption and other priorities appeared first on CyberScoop.
The new system emerges after repeated funding crises exposed the fragility of the 25-year-old CVE program that cybersecurity defenders worldwide depend on.
The post GCVE launches as a decentralized system for tracking software vulnerabilities appeared first on CyberScoop.
The House Homeland Security Committee grilled Madhu Gottumukkala, the acting director of the agency, over cutbacks both broad and specific.
The post Lawmakers probe CISA leader over staffing decisions appeared first on CyberScoop.
Oleg Evgenievich Nefedov, a 35-year-old Russian national, is accused of forming and running the ransomware outfit since 2022. He’s now on Europol and Interpol’s most-wanted lists.
The post Black Basta’s alleged ringleader identified as authorities raid homes of other members appeared first on CyberScoop.
Ransomware negotiators dish on being in a ‘moral gray zone,’ unrestricted by accountability or industrywide rules of engagement.
The post The thin line between saving a company and funding a crime appeared first on CyberScoop.
The voluntary framework would provide legal clarity to third-party AI researchers, including those who study safety and other “unexpected” AI behaviors.
The post HackerOne rolls out industry framework to support ‘good faith’ AI research appeared first on CyberScoop.
The legislation also includes mandates on election security funding and CISA staff levels, as well as an extension of a state and local cyber grant program.
The post Congressional appropriators move to extend information-sharing law, fund CISA appeared first on CyberScoop.
The rise of malicious bots is changing how the internet operates, underscoring the need for stronger safeguards that keep humans firmly in control. Bots now account for more than half of global web traffic, and a new class of “predator bots” has emerged, unleashing self-learning programs that adapt in real time, mimic human behavior, and […]
The post Predator bots are exploiting APIs at scale. Here’s how defenders must respond. appeared first on CyberScoop.
