Organizations must turn Cyber Governance, Risk, and Compliance (GRC) into executable pipelines, a Microsoft security product manager argues.
The post New White House cyber executive order pushes rules as code appeared first on CyberScoop.
XBOW’s AI bug-hunter landed a big funding round while dominating HackerOne’s leaderboards. But even its founder says it hasn’t fully replaced the need for humans to be involved in the bug-hunting process.
The post Is XBOW’s success the beginning of the end of human-led bug hunting? Not yet. appeared first on CyberScoop.
“PerfektBlue” impacts tech used in Mercedes-Benz, Volkswagen, and Skoda automobiles.
The post Researchers identify critical vulnerabilities in automotive Bluetooth systems appeared first on CyberScoop.
Virtru's technology centers on the Trusted Data Format, an open standard that embeds security controls directly into data files rather than relying on traditional perimeter defenses.
The post Virtru secures $50 million investment to advance data-centric security standards appeared first on CyberScoop.
Daniil Kasatkin played briefly for Penn State University. It’s the second European arrest on cyber allegations at the request of the United States to be revealed this week.
The post French police arrest Russian pro basketball player on behalf of US over ransomware suspicions appeared first on CyberScoop.
The U.K.’s National Crime Agency claims the four were involved in attacks on Marks & Spencer. The cybersecurity industry attributed those attacks to Scattered Spider.
The post UK arrests four for cyberattacks on major British retailers appeared first on CyberScoop.
Witnesses at a Senate hearing Wednesday connected One Big Beautiful Bill provisions to potential cyber issues in the health care sector, much to GOP Sen. Bill Cassidy’s chagrin.
The post Trump bill will have major impact on health care cybersecurity, experts warn Congress appeared first on CyberScoop.
The court vacated the district court’s decision to dismiss the case against NSO Group, saying it abused its discretion in doing so.
The post Appeals court clears path for El Salvadoran journos to sue spyware maker appeared first on CyberScoop.
Researchers are especially concerned about a high-severity defect in SQL Server and a critical vulnerability in SPNEGO, a foundational protocol.
The post Microsoft Patch Tuesday addresses 130 vulnerabilities, none actively exploited appeared first on CyberScoop.
The arrest came at the request of the United States, which hailed the development as a sign that patience in pursuing cybercriminals in court is rewarded.
The post Italian authorities arrest Chinese man over Microsoft Exchange Server hack, targeting of COVID-19 researchers appeared first on CyberScoop.
A North Korean man was the focus of Tuesday’s announcement, which also included a Russian man, his companies and North Korean firms.
The post Treasury slaps sanctions on people, companies tied to North Korean IT worker schemes appeared first on CyberScoop.
Application Attack Matrix is a community effort designed to help defenders and organizations better understand and define how attackers use and exploit weaknesses in applications.
The post Oligo Security strives to fill application-layer gaps in MITRE ATT&CK framework appeared first on CyberScoop.
Gamemakers have only said they are investigating an unspecified “issue.” Players are posting videos of their computers being compromised.
The post Call of Duty takes PC game offline after multiple reports of RCE attacks on players appeared first on CyberScoop.
The cybercrime ring has infiltrated more than 100 businesses since 2022, including more than a dozen since it regrouped earlier this year.
The post Scattered Spider weaves web of social-engineered destruction appeared first on CyberScoop.
Democrats have critiqued the bill for not protecting funds for the Cybersecurity and Infrastructure Security Agency.
The post GOP domestic policy bill includes hundreds of millions for military cyber appeared first on CyberScoop.
AI coding is a big security problem when most security teams are still relying on tools designed for a world where human-written code remains prevalent.
The post The dual reality of AI-augmented development: innovation and risk appeared first on CyberScoop.
French authorities said government agencies and businesses spanning telecom, media, finance and transportation were impacted by the widely exploited Ivanti vulnerabilities.
The post China-linked attacker hit France’s critical infrastructure via trio of Ivanti zero-days last year appeared first on CyberScoop.
Brett Leatherman told CyberScoop in an interview that while the group still poses a threat, the bureau is focused on resilience and victim support, and going on offense could be in the future.
The post Top FBI cyber official: Salt Typhoon ‘largely contained’ in telecom networks appeared first on CyberScoop.
The move is the result customer feedback, since they neither wanted to grant AI web crawlers unrestricted access to their data nor block the practice entirely.
The post Cloudflare rolls out ‘pay-per-crawl’ feature to constrain AI’s limitless hunger for data appeared first on CyberScoop.
Russia-based Aeza Group allegedly provided infrastructure to BianLian ransomware and the Meduza, RedLine and Lumma infostealer operators.
The post US sanctions bulletproof hosting provider for supporting ransomware, infostealer operations appeared first on CyberScoop.
