The trio, which share lineage with the more broadly defined Lazarus Group, are focused on espionage and cryptocurrency theft, according to CrowdStrike.
The post Long-running North Korea threat group splits into 3 distinct operations appeared first on CyberScoop.
Attackers have exploited the critical defect to reconfigure firewall settings and create unauthorized accounts with privileged access to multiple versions of the vendor’s security products.
The post Fortinet’s latest zero-day vulnerability carries frustrating familiarities for customers appeared first on CyberScoop.
The Senate Judiciary Committee held a hearing on Section 702, set to sunset at the end of April, but with no Trump administration witnesses present.
The post Lawmakers wonder when Trump administration will weigh on soon-expired surveillance powers appeared first on CyberScoop.
The lawsuit accuses xAI seeking to “capitalize on the internet’s seemingly insatiable appetite for humiliating non-consensual sexual images.”
The post Undressed victims file class action lawsuit against xAI for Grok deepfakes appeared first on CyberScoop.
The Microsoft-BitLocker episode highlights a larger design problem: when providers retain recovery keys, encryption becomes conditional.
The post If you don’t control your keys, you don’t control your data appeared first on CyberScoop.
Nation-state groups are consistently exploiting the defect to target victims in military, government and technology for espionage.
The post Cybercriminals and nation-state groups are exploiting a six-month old WinRAR defect appeared first on CyberScoop.
The new “Strict Account Settings” toggle extends WhatsApp’s privacy push beyond end-to-end encryption.
The post WhatsApp releases account feature that looks to combat spyware appeared first on CyberScoop.
LevelBlue calls the move “all upside” for MDR customers, stressing that “nothing’s going to change.”
The post LevelBlue scoops up Alert Logic’s managed services from Fortra appeared first on CyberScoop.
A guide aims to help tech buyers navigate their switch to post-quantum encryption, but experts cautioned that most products and backend internet protocols have yet to be updated.
The post CISA publishes a post-quantum shopping list for agencies. Security professionals aren’t sold appeared first on CyberScoop.
Cybercrime groups, including one that identifies as ShinyHunters, are targeting single sign-on services to gain access to victim networks and steal data.
The post A new wave of ‘vishing’ attacks is breaking into SSO accounts in real time appeared first on CyberScoop.
Russell Vought’s updated memo using a common attestation form voluntary. A critic told CyberScoop it’s the “first major policy step back” on cybersecurity under Trump.
The post OMB rescinds ‘burdensome’ Biden-era secure software memo appeared first on CyberScoop.
A threat actor is seeding the internet with AI browser extensions that can intercept a user’s authenticated session tokens and hijack accounts.
The post Some ChatGPT browser extensions are stealing your data appeared first on CyberScoop.
The weekend discussion about the next step of the Pall Mall Process revealed some of the topics rules-writers will have to weigh.
The post Industry, government, nonprofits weigh voluntary rules for commercial hacking tools appeared first on CyberScoop.
The lawsuit comes a day after a TSA official vigorously defended the practice as critical to “national security” in testimony to Congress.
The post Watchdog group sues for TSA data sharing agreement with ICE appeared first on CyberScoop.
Ianis Antropenko, a Russian national living in California, admitted to committing ransomware attacks against at least 50 victims. He faces up to 25 years in jail.
The post Leader of ransomware crew pleads guilty to four-year crime spree appeared first on CyberScoop.
The incidents occurred amid Gaza protests and suggest human rights violations, Citizen Lab said.
The post Researchers find Jordan government used Cellebrite phone-cracking tech against activists appeared first on CyberScoop.
The agency has shed more than 700 jobs since 2025, including 89 at a lab responsible for testing and validating the government’s encryption.
The post NIST officials detail impact of staff cuts on encryption and other priorities appeared first on CyberScoop.
The new system emerges after repeated funding crises exposed the fragility of the 25-year-old CVE program that cybersecurity defenders worldwide depend on.
The post GCVE launches as a decentralized system for tracking software vulnerabilities appeared first on CyberScoop.
The House Homeland Security Committee grilled Madhu Gottumukkala, the acting director of the agency, over cutbacks both broad and specific.
The post Lawmakers probe CISA leader over staffing decisions appeared first on CyberScoop.
Oleg Evgenievich Nefedov, a 35-year-old Russian national, is accused of forming and running the ransomware outfit since 2022. He’s now on Europol and Interpol’s most-wanted lists.
The post Black Basta’s alleged ringleader identified as authorities raid homes of other members appeared first on CyberScoop.
