Who is sending those scammy text messages about unpaid tolls?
It’s not just you. Seemingly everyone is getting those text messages that serve as a notification of an unpaid toll road violation. The past…
Category: Cyberscoop
DOGE staffer violated security policies at Treasury Department, court filing shows
A staffer for the Department of Government Efficiency (DOGE) violated security policies at the Treasury Department by improperly sharing sensitive personal information outside the agency,…
Cloudflare rolls out post-quantum encryption for enterprise users
Internet security company Cloudflare, the world’s largest DDoS-mitigation service, plans to shift a sizable chunk of its traffic through post-quantum encrypted services over the next…
California’s legal push on geolocation data collection must take aim at the right targets, privacy experts say
The attorney general for California announced this week a wide-ranging investigation into the way companies collect, process and use consumer location data. The investigation will…
Water utilities would get cybersecurity boost under bipartisan Senate bill
Small water and wastewater utilities would get a boost to their cybersecurity defenses under a bipartisan Senate bill that a pair of lawmakers re-introduced Thursday.…
US must prioritize cybersecurity training for the military’s engineers
The Trump administration begins under the shadow of a series of consequential Chinese cyber hacks targeting U.S. critical infrastructure. While incoming officials grapple with long-standing…
Lazarus Group deceives developers with 6 new malicious npm packages
Lazarus Group has burrowed deeper into the npm registry and planted six new malicious packages designed to deceive software developers and disrupt their workflows, researchers…
Legislative push for child online safety runs afoul of encryption advocates (again)
Two members of the Senate Judiciary Committee are preparing to introduce a bipartisan bill that would mandate tech companies to more swiftly report and remove…
Microsoft patches 57 vulnerabilities, including 6 zero-days
Microsoft patched 57 vulnerabilities affecting its foundational systems and core products, including six actively exploited zero-day vulnerabilities, the company said in its latest security update…
Apple discloses zero-day vulnerability, releases emergency patches
Apple released emergency software patches Tuesday that address a newly identified zero-day vulnerability in the company’s WebKit web browser engine. Tracked as CVE-2025-24201, an attacker…
X suffered a DDoS attack. Its CEO and security researchers can’t agree on who did it.
Social media service X was hit by a series of distributed denial-of-service attacks Monday, which rendered the platform formerly known as Twitter inaccessible at times…
Trade groups worry information sharing will worsen without critical infrastructure panel, CISA law renewal
Business groups told lawmakers Tuesday that they fear cyber threat information sharing could drop off in light of the Trump administration’s move to eliminate a…