Civilian federal agencies and companies in the critical infrastructure space may be looking at a three-day cyber incident reporting window should recent cybersecurity legislation make it through the House.
Samsung phones produced between 2017 and 2021 have a severe encryption flaw that can open up the entire device to an attacker without much effort.
Attacker exploited Wormhole network’s unique status as a “bridge” between the Solona blockchain and a variety of other DeFi projects. A signature verification vulnerability allowed them to make this connection.
The pattern of the cyber attacks fit Russia’s general intentions and past actions, but seemed restrained. The banks and government websites were ultimately only inconvenienced for a few hours.
Credential stuffing has grown year-over-year, particularly during the Covid-19 pandemic. Every new data breach that leaks compromised accounts to the dark web provides these campaigns with that much more fuel.
What exactly does the FTC expect companies to do to steer clear of legal action? Thus far it has not laid out specific requirements, but has called for “reasonable steps” to include following the CISA published guidance on Log4J.
A critical vulnerability in the Polygon network that could have been exploited to compromise all MATIC coins was thwarted by two ethical hackers and a timely patch, saving some $24 billion.
Russian troops on the border of Ukraine have prompted fears of armed conflict, but intelligence experts believe that hostilities may be limited to cyber attacks as Russia pursues its ongoing strategy of undermining the Ukrainian government.
Director of National Intelligence John Ratcliffe has issued a statement that Iranian and Russian actors have US voter data and are using it to engage in election interference.
Israel and Iran may be in a hidden cyber war with both countries attacking each other’s critical infrastructure, causing physical disruptions to the civilian population.