One House Democrat is pressing Commerce on the government’s spyware use
A House Democrat who’s been at the forefront of congressional efforts to scrutinize the federal government’s use of commercial spyware wants the Commerce Department to…
Category: Cyberscoop
A critical Palo Alto PAN-OS zero-day is being exploited in the wild
Attackers are actively exploiting a zero-day vulnerability affecting some Palo Alto Networks’ customers’ firewalls, the security vendor said in an advisory Tuesday. The critical memory…
A DOD contractor’s API flaw exposed military course data and service member records
A defense technology company with Department of Defense contracts exposed user records and military training materials through API endpoints that lacked meaningful authorization checks, according…
CISA boasts AI automation improvements to threat analysis, mission support
The Cybersecurity and Infrastructure Security Agency has gotten “by far” the biggest gains from artificial intelligence automation in its security operations unit to help analysts…
CISA wants critical infrastructure to operate ‘weeks to months’ in isolation during conflict
The Cybersecurity and Infrastructure Security Agency is urging critical infrastructure owners and operators to plan for delivering essential services under emergency conditions – potentially for…
Latvian national sentenced for ransomware attacks run by former Conti leaders
A federal judge sentenced a Latvian national to 102 months in prison for his involvement in a series of ransomware attacks for more than two…
‘Copy Fail’ is a real Linux security crisis wrapped in AI slop
Attackers are actively exploiting a Linux vulnerability in the wild, and researchers warn that the fallout could be broad — anyone with authenticated local access…
A college student is suing a dating app that allegedly used her TikTok videos to target men in her dormitory
A 19-year-old woman is suing the makers of a dating app, alleging they took a video she posted online, repurposed it without her consent into…
Why data centers now belong on the critical infrastructure list
Missile and drone attacks that took out cloud data centers in the Middle East underscored a critical vulnerability in the modern economy: reliance on digital…
US government, allies publish guidance on how to safely deploy AI agents
Cybersecurity agencies from the United States, Australia, Canada, New Zealand and the United Kingdom jointly published guidance Friday urging organizations to treat autonomous artificial intelligence…
cPanel’s authentication bypass bug is being exploited in the wild, CISA warns
A severe authentication bypass vulnerability in cPanel, one of the most widely deployed web hosting control panel platforms on the internet, is being actively exploited…
Congress kicks the can down the road on surveillance law (again)
Congress extended a controversial surveillance law for 45 days on Thursday, hours before its latest expiration following an earlier extension. The Senate passed — then…