Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
A Delaware-based defense and aerospace company has settled a case with U.S. agencies over government
CISA’s new strategy runs into America’s blind trust problem
An attacker with a working credential may find the system already open to them. That
Google shuts down global botnet running on certified Android devices
Google and an assortment of partners shut down a botnet that an approved Android device
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
A China state-backed threat group is using ARTEX, the automated agentic AI penetration testing framework,
What happens when security tools go dark before the ransomware
On Oct. 1, threat researchers reported that the China-linked group behind Warlock ransomware, which Microsoft
Experts temper emergency-level alarms over critical Brotli defect
Alarm bells ratcheted up yet again about an AI-discovered vulnerability that could — if exploited
Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
A new bipartisan House bill would charge the federal government with developing formal guidance for
Encryption isn’t enough to protect data wherever it goes
Cybersecurity policy has long treated data protection as a systems problem: encrypt the database, secure
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Microsoft researchers attributed the recent supply-chain attack targeting ConnectWise customers’ Microsoft 365 environments to a
ConnectWise customers hit by supply-chain attack linked to compromised API secret
A portion of ConnectWise’s customers have been adrift for days, and hundreds are compromised, as