CISA guide seeks a unified approach to software ‘ingredients lists’
Compiling an “ingredients list” for software can help organizations reduce cyber risks, avoid fines and save time, among other benefits, a Cybersecurity and Infrastructure Security…
Category: Cyberscoop
House panel approves cyber information sharing, grant legislation as expiration deadlines loom
A House panel advanced legislation Wednesday that would reauthorize a major cyber threat information sharing law and a big-dollar state and local cyber grant program…
Google patches two Android zero-days, 120 defects total in September security update
Google warned that two actively exploited zero-day vulnerabilities affecting Android devices have been patched in its September security update, which addresses 120 software defects total. …
FTC announces settlement with toy robot makers that tracked location of children
The Federal Trade Commission announced a settlement Tuesday with a Chinese robot toy manufacturer, following an investigation that charged the company with illegally collecting the…
Court rules ‘fired’ FTC commissioners be reinstated — again
For the second time, a court has ruled that President Donald Trump’s attempted firing of Federal Trade Commission members Rebecca Slaughter and Alvaro Bedoya was…
CISA taps Nicholas Andersen for executive assistant director of cybersecurity
Nicholas Andersen is taking over a top leadership role at the Cybersecurity and Infrastructure Security Agency, CISA announced Tuesday. He will become executive assistant director…
Salesloft Drift attacks hit Cloudflare, Palo Alto Networks, Zscaler
Multiple security and technology companies have been swept up in a far-reaching attack spree originating at Salesloft Drift, including Cloudflare, PagerDuty, Palo Alto Networks, SpyCloud…
Varonis buys AI email security firm SlashNext
Varonis has acquired SlashNext, an AI-driven email security company, for up to $150 million in a move that reflects the rising role of artificial intelligence…
Workado settles with FTC over allegations it inflated its AI detectors’ capabilities
The Federal Trade Commission thinks AI detectors might be BS. The agency announced a consent order this week with Workado, an Arizona-based company that makes…
Top FBI official says Chinese reliance on domestic firms for hacking is a weakness
China’s reliance on domestic technology companies to carry out large-scale hacking operations—as highlighted by the U.S. government and its allies this week—is a weakness that…
Salesloft Drift compromised en masse, impacting all third-party integrations
Salesloft Drift customers are compromised in a much more expansive downstream attack spree than previously thought, potentially ensnaring any user that integrated the AI chat…
Trump administration setting the stage for elections power grab, voting rights group warns
Election officials should brace for direct attacks from the Trump administration and its state GOP allies on the integrity of U.S. elections — and plan…