Legislative push for child online safety runs afoul of encryption advocates (again)
Two members of the Senate Judiciary Committee are preparing to introduce a bipartisan bill that would mandate tech companies to more swiftly report and remove…
Category: Cyberscoop
Microsoft patches 57 vulnerabilities, including 6 zero-days
Microsoft patched 57 vulnerabilities affecting its foundational systems and core products, including six actively exploited zero-day vulnerabilities, the company said in its latest security update…
Apple discloses zero-day vulnerability, releases emergency patches
Apple released emergency software patches Tuesday that address a newly identified zero-day vulnerability in the company’s WebKit web browser engine. Tracked as CVE-2025-24201, an attacker…
X suffered a DDoS attack. Its CEO and security researchers can’t agree on who did it.
Social media service X was hit by a series of distributed denial-of-service attacks Monday, which rendered the platform formerly known as Twitter inaccessible at times…
Trade groups worry information sharing will worsen without critical infrastructure panel, CISA law renewal
Business groups told lawmakers Tuesday that they fear cyber threat information sharing could drop off in light of the Trump administration’s move to eliminate a…
Amid personnel turmoil at cyber agencies, a government shutdown could increase potential harm
A potential government shutdown looms by the end of this week if Congress doesn’t pass legislation to keep funding the federal government, a development that…
Sean Plankey picked by Trump to be CISA director
President Donald Trump nominated Sean Plankey to head the Cybersecurity and Infrastructure Security Agency on Tuesday, the last major piece to fall into place for…
New York sues Allstate and subsidiaries for back-to-back data breaches
Allstate and several of the insurance company’s subsidiaries were accused of poor security practices resulting in data breaches in 2020 and 2021 that exposed sensitive…
Multiple vulnerabilities found in ICONICS industrial SCADA software
A popular set of SCADA software systems used in critical infrastructure around the world suffered from at least five known vulnerabilities that could have allowed…
Investigator says differing names for hacker groups, hackers studying investigative methods hinders law enforcement
Malicious hacking groups pay close attention to public documents related to criminal prosecutions, and the lack of standardized names for those groups hampers U.S. federal…
Former top NSA cyber official: Probationary firings ‘devastating’ to cyber, national security
The NSA’s former top cybersecurity official told Congress on Wednesday that the Trump administration’s attempts to mass fire probationary federal employees will be “devastating” for…
Chainguard’s FIPS-compliant Cassandra addresses security demand of federal and regulated markets
Open-source software security firm Chainguard announced Wednesday that it is now building FIPS-validated images for Apache Cassandra, achieving what it describes as a first-of-its-kind accomplishment…