Chinese Hackers Steal Emails From Belgian State Intelligence Service
The Belgian government is investigating what looks to be a 2023 attack by Chinese hackers, who breached an external email server used regularly by its federal intelligence service.
-
-
Password-Spraying Attacks by Botnet With 130,000 Devices Linked to Chinese Hackers Target Microsoft 365 Accounts
A group that security researchers believe to be affiliated with China is targeting Microsoft 365 accounts with password-spraying attacks, taking advantage of a common oversight in automated security logging to fly below the radar despite the massive scale of the operation.
-
Record-Setting $1.5 Billion Crypto Theft Keeps Lazarus Hackers At The Top of the Threat List
North Korea’s Lazarus hackers appear to have pulled off another record-setting crypto theft as security researchers are attributing the $1.5 billion Bybit hack to them.
-
Talos: Salt Typhoon Campaign Targeted Cisco Equipment, But Did Not Rely on Published Cisco Bugs
Despite reports of exploitation of Cisco bugs, researchers found that only one known published vulnerability was used in a compromise. For the most part, the Salt Typhoon hackers were able to obtain valid login credentials from somewhere.
-
End-to-End Encryption for iCloud Ended in UK After Government Order
With the UK Home Office invoking the Investigatory Powers Act 2016 to issue a secret order to Apple demanding a backdoor into iCloud. Apple has now taken the step of disabling its Advanced Data Protection (ADP) feature, presumably in response.
-
iCloud Data Encryption Threatened by Secret UK Backdoor Order
Anonymous sources report that Apple has recently been handed a secret order install a backdoor into iCloud data, one that it has limited ability to take legal recourse against.
-
DOGE Team’s Handling of Federal Data, Use of AI Software Comes Into Question
Elon Musk’s DOGE team seems to be rifling through the federal bureaucracy at breakneck speed, and inside sources say that is attributable to the use of AI software. These anonymous sources also claim that federal data is being fed into AI systems haphazardly and in a way that might create serious security and privacy risks.
-
DeepSeek Bans Continue to Emerge, But How Far Will U.S. Lawmakers Go?
Aside from Italy there are DeepSeek bans already out in Australia, South Korea and Taiwan. The espionage risks are obvious. U.S. lawmakers have already seen restrictions on use of the app in Congress and will likely approve a total ban from government devices.
-
Paragon Spyware Grabs Headlines as WhatsApp Reports Government Targeting of Civilians
You’ve heard about Pegasus spyware for years, now get ready for Paragon. While Paragon spyware is supposed to only be sold to “good guy” governments for law-abiding purposes, new accusations levied by WhatsApp may put it under the same spotlight.
-
CISA Warning Highlights Actively Exploited Critical Vulnerability in Microsoft Outlook
A CISA warning to federal agencies has put a spotlight on a critical Microsoft Outlook vulnerability that allows for remote code execution and can grant an attacker control over a target system.
