Microsoft’s software licensing playbook is a national security risk
News of two major Microsoft security events in as many weeks should concern every federal agency, not just because of the breaches themselves, but because…
Category: Cyberscoop
US offers $15 million reward for info on North Korean nationals involved in global criminal network
The State Department announced Thursday it will pay up to $15 million for information leading to the arrest of seven North Korean nationals accused of…
Microsoft SharePoint attacks ensnare 400 victims, including federal agencies
The fallout from an attack spree targeting defects in on-premises Microsoft SharePoint servers continues to spread nearly a week after zero-day exploits were discovered, setting…
Sean Plankey vows to boot China from U.S. supply chain, advocate for CISA budget
President Donald Trump’s pick to lead the Cybersecurity and Information Security Agency told senators Thursday that he would prioritize evicting China from the U.S. supply…
Trump AI plan pushes critical infrastructure to use AI for cyber defense
The Trump administration’s new AI Action Plan calls for companies and governments to lean into the technology when protecting critical infrastructure from cyberattacks. But it…
Authorities in Ukraine nab alleged admin of Russian-language cybercrime forum
Ukrainian authorities Tuesday arrested the alleged administrator of XSS.is, a Russian-language cybercrime forum, following a four-year investigation by the Paris public prosecutor’s office. Law enforcement…
Cisco network access security platform vulnerabilities under active exploitation
A pair of maximum-severity vulnerabilities affecting Cisco’s network access security platform are under active exploitation, the enterprise networking and IT vendor warned in a security…
Contract lapse leaves critical infrastructure cybersecurity sensor data unanalyzed at national lab
Data from sensors that detect threats in critical infrastructure networks is sitting unanalyzed after a government contract expired this weekend, raising risks for operational technology,…
House Republicans endorse stricter state and federal-led voter roll purges despite dearth of evidence on fraud
In a congressional hearing on state voter registration practices Tuesday, Republicans on the House Administration Committee were united around common sentiments: It is too easy…
Microsoft SharePoint zero-day attacks pinned on China-linked ‘Typhoon’ threat groups
Microsoft said two China nation-state threat groups and a separate attacker based in China are exploiting the zero-day vulnerabilities that first caused havoc to SharePoint…
UK moves to ban public sector organizations from making ransom payments
The British government announced plans to prohibit public sector organizations and critical infrastructure operators from paying ransoms to cybercriminals, marking a significant shift in the…
After website hack, Arizona election officials unload on Trump’s CISA
Arizona election officials say a hack targeting a statewide online portal for political candidates resulted in the defacement and replacement of multiple candidate photos with…