Data Breach Today

JULY 15, 2024

GAO: Department Lacks Cybersecurity Strategies for Major Business IT Programs The U.S.

Cybersecurity 294

Cybersecurity Government IT 294

Security Affairs

SEPTEMBER 20, 2024

Ukraine’s NCCC banned the Telegram app for government agencies, military, and critical infrastructure, due to national security concerns. ” Despite the ban on military and government devices, Ukrainian users rely heavily on Telegram to communicate and receive news on ongoing conflicts. ” continues the announcement.

Military 340

Military Government Personal data Phishing 340

Data Breach Today

FEBRUARY 26, 2024

New CSF Adds 'Governance' to Core Functions Cybersecurity guidance for the private sector published by the U.S. The revised Cybersecurity Framework focuses on governance and says cybersecurity threats are a major source of enterprise risk.

Cybersecurity 298

Cybersecurity Government Risk IT 298

The Last Watchdog

DECEMBER 18, 2024

Wojtasiak Mark Wojtasiak , VP of Research and Strategy, Vectra AI In the coming year, well see the initial excitement that surrounded AIs potential in cybersecurity start to give way due to a growing sense of disillusionment among security leaders. The SEC Cybersecurity Disclosure Rule highlights transparency in governance.

Compliance 130

Compliance Cybersecurity Risk Privacy 130

Data Breach Today

FEBRUARY 5, 2024

Government Watchdog Urges ONCD to Develop Outcome-Oriented Performance Measures A government watchdog urged the White House to establish metrics that would help determine the effectiveness of federal cybersecurity initiatives, but it's a lot easier to recommend developing outcome-oriented performance measures for cybersecurity than it is to actually (..)

Cybersecurity 288

Cybersecurity Government IT 288

Security Affairs

FEBRUARY 4, 2024

The US government issued sanctions against six Iranian government officials linked to cyberattacks against critical infrastructure organizations. The Iranian Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC) is an organization within the Iranian government responsible for cybersecurity and cyber warfare.

Government 330

Government Manufacturing Ransomware Cybersecurity 330

Security Affairs

OCTOBER 23, 2024

The charges result from an investigation conducted by the US government into public companies potentially impacted by the supply chain attack on SolarWinds’ Orion software. The four companies agreed to stop future violations, pay penalties, and improve cybersecurity controls without admitting guilt.

Cybersecurity 284

Cybersecurity Risk Access Government 284

Data Breach Today

JANUARY 10, 2024

Cyber Regulation Requires EU Agencies to Assess Risks and Report Incidents The European Union adopted regulations on cyber hygiene intended to beef up cybersecurity at EU government agencies amid concerns that trading bloc institutions have failed to keep pace with mounting digital threats.

Cybersecurity 301

Cybersecurity Risk Government 301

WIRED Threat Level

APRIL 15, 2024

Microsoft has stumbled through a series of major cybersecurity failures over the past few years. Experts say the US government’s reliance on its systems means the company continues to get a free pass.

Government 362

Government Cybersecurity IT Security 362

Data Breach Today

SEPTEMBER 17, 2024

Cybersecurity Experts Say Operatives Probably Intercepted Physical Supply Chain It doesn't appear to be a cyberattack, security experts said of the hundreds of pagers that blew up Tuesday across Lebanon, an apparent salvo against Hezbollah militants by the Israeli government.

Cybersecurity 286

Cybersecurity Government Security IT 286

Data Breach Today

SEPTEMBER 18, 2023

Australian Federal Police, Department of Home Affairs Reportedly Among the Victims An April ransomware attack against one of Australia's largest law firms swept up the data of 65 Australian government agencies, the country's national cybersecurity coordinator said Monday.

Government 289

Government Ransomware Cybersecurity 289

Security Affairs

FEBRUARY 24, 2025

A leak suggests that Chinese cybersecurity firm TopSec offers censorship-as-a-service services, it provided bespoke monitoring services to a state-owned enterprise facing a corruption scandal. SentinelLABS researchers analyzed a data leak that suggests that the Chinese cybersecurity firm TopSec offers censorship-as-a-service services.

Cybersecurity 216

Cybersecurity Government Cloud Security 216

Security Affairs

SEPTEMBER 12, 2024

Fortinet has been actively contributing to Australia’s cybersecurity landscape, recently submitting recommendations for the 2023–2030 Australian Cyber Security Strategy. It is unclear if the Australian federal government or critical infrastructure was impacted due to the incident.

Data breaches 350

Data breaches Cybersecurity Cloud Access 350

Data Breach Today

AUGUST 23, 2024

New Lawsuit Alleges Georgia Tech Submitted 'False' Cybersecurity Score to DOD The Justice Department intervened in a whistleblower lawsuit against the Georgia Institute of Technology and the Georgia Tech Research Corp. for allegedly failing to implement federally required cybersecurity protections while overseeing sensitive government data.

Cybersecurity 265

Cybersecurity Government 265

Data Breach Today

APRIL 1, 2024

GSA Establishes Framework for Security Regulations Covering Federal Acquisitions The federal government aims to streamline its information security and supply chain security procurement policies as part of an effort to better safeguard federal systems.

Information Security 278

Information Security Government Security Cybersecurity 278

Data Breach Today

OCTOBER 24, 2023

Federal Civilian Agencies 'Are Likely to Resist This Dramatic Change,' Report Says A study of federal government cybersecurity suggests the Department of Homeland Security could play a more prominent role in securing civilian networks, in a report that touts a "more centralized defensive strategy."

Cybersecurity 292

Cybersecurity Military Government Security 292

Data Breach Today

MARCH 14, 2024

Also: Catching Up With Spain's Most Dangerous Hacker This week, the FCC OK'd cybersecurity labeling, DarkGate exploited Google, Fortinet patched a bug, cyberattacks hit the French government and employment agencies, Google restricted Gemini AI chatbot and paid bug bounties, Microsoft had Patch Tuesday, Marine Max was attacked, and Alcasec moved on. (..)

Cybersecurity 297

Cybersecurity IoT Government 297

Security Affairs

OCTOBER 12, 2024

The government agencies warn that the Russian APT29 group has the capability and intent to exploit more CVEs for initial access, remote code execution, and privilege escalation. “SVR cyber actors have exploited vulnerabilities at a mass scale to target victims worldwide across a variety of sectors” reads the joint advisory.

Data collection 338

Data collection Authentication Access Cybersecurity 338

The Last Watchdog

NOVEMBER 12, 2024

Security and Exchange Commission (SEC) recently laid down the hammer charging and fining four prominent cybersecurity vendors for making misleading claims in connection with the SolarWinds hack. Joe Nicastro , Field CTO, Legit Security Nicastro Transparency in cybersecurity remains a complex balancing act.

Cybersecurity 263

Cybersecurity Risk Government Compliance 263

Security Affairs

JANUARY 14, 2025

According to court documents, the Chinese government paid Mustang Panda to develop PlugX malware, used since 2014 to target U.S., French law enforcement and cybersecurity firm Sekoia.io European, and Asian entities. A court operation recently removed PlugX infections from U.S. led the international operation against the malware. .”

Government 299

Government Cybersecurity Access IT 299

Security Affairs

OCTOBER 9, 2024

A threat actor tracked as Awaken Likho is targeting Russian government agencies and industrial entities, reported cybersecurity firm Kaspersky. The threat actor continues to target Russian government entities and enterprises.

Government 300

Government Archiving Phishing Access 300

eSecurity Planet

APRIL 3, 2025

billion) bet on Europes digital future, with a strong focus on shoring up cybersecurity defenses, boosting artificial intelligence, and closing the digital skills gap. Cybersecurity gets a major boost A big chunk of the funding45.6 Cybersecurity gets a major boost A big chunk of the funding45.6 billion ($1.4

Cybersecurity 99

Cybersecurity Artificial Intelligence Government Manufacturing 99

Data Breach Today

JANUARY 31, 2024

Getting the health sector to vastly improve the state of its cybersecurity will take much more than the recent issuance of federal guidance outlining cyber performance goals for entities. It will also require new government incentives and mandates, said Steve Cagle, CEO of consultancy Clearwater.

Cybersecurity 269

Cybersecurity Government IT 269

Security Affairs

JULY 10, 2024

Multiple cybersecurity agencies released a joint advisory warning about a China-linked group APT40 ‘s capability to rapidly exploit disclosed security flaws. Cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the U.K., and the U.S. “ In July 2021, the U.S.

Cybersecurity 320

Cybersecurity Government Phishing IT 320

Data Breach Today

MAY 20, 2024

TekStream's Johnson and Splunk's Prevost on Tapping Into Student Talent for the SOC The threat landscape has evolved for state and local government entities as well as higher education institutes.

Cybersecurity 306

Cybersecurity Education Government 306

Security Affairs

DECEMBER 4, 2024

The government agencies released a guide that advises telecom and critical infrastructure defenders on best practices to strengthen network security against PRC-linked and other cyber threats. telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures.

Government 278

Government Communications Access Passwords 278

Data Breach Today

DECEMBER 4, 2024

Tips for Finding and Getting Security Jobs in a Global Market Organizations ranging from multinational corporations to government agencies and international nonprofits require cybersecurity expertise.

Cybersecurity 221

Cybersecurity Marketing Government Security 221

Security Affairs

NOVEMBER 18, 2024

telecoms, compromising networks to steal call records and access private communications, mainly of government and political figures. The US agencies confirmed that Chinese threat actors had compromised the private communications of a “limited number” of government officials following the compromise of multiple U.S.

Data breaches 279

Data breaches Communications Artificial Intelligence Government 279

Data Breach Today

APRIL 1, 2025

Government Says Managed Service Providers Need More Regulation The British government pledged to introduce stricter rules surrounding incident reporting and supply chain vulnerability patching through legislation it previewed in July 2024.

Government 130

Government Cybersecurity Security IT 130

Security Affairs

OCTOBER 13, 2023

A cyberespionage campaign, tracked as Stayin’ Alive, targeted high-profile government and telecom entities in Asia. Is it linked to ToddyCat APT? appeared first on Security Affairs.

Government 326

Government IT Encryption Libraries 326

WIRED Threat Level

APRIL 16, 2025

Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it. The CVE Program is the primary way software vulnerabilities are tracked.

Cybersecurity 259

Cybersecurity Government IT Security 259

Data Breach Today

APRIL 18, 2025

DOGE Staffers Allegedly Violated Federal Cyber Best Practices and Data Privacy Laws A whistleblower complaint made public this week provides the most in-depth look yet at the Department of Government Efficiency's many alleged cybersecurity failures, from violating federal best practices to seemingly ignoring data security laws in an apparent bid to (..)

Cybersecurity 162

Cybersecurity Data Privacy Government Privacy 162

Security Affairs

AUGUST 29, 2023

China-linked threat actors breached government organizations worldwide with attacks exploiting Barracuda ESG zero-day. Almost one out of three affected organizations were government agencies, a circumstance that suggests that the attacks were carried out as part of a cyber espionage campaign. reads the report published by Mandiant.

Government 311

Government Access Security Cybersecurity 311

Data Breach Today

NOVEMBER 16, 2023

In this episode of "Cybersecurity Insights," Hedderman discusses privacy, third-party vendor risk, and lawyers' use of AI. Regulating AI is "like regulating Jell-O," said Massachusetts risk counsel Jenny Hedderman, but states are looking at regulating "areas of harm" rather than AI as a whole.

Privacy 278

Privacy Government Risk Cybersecurity 278

Security Affairs

NOVEMBER 19, 2024

According to the indictment, Ptitsyn facilitated the worldwide use of a dangerous ransomware strain to target corporations and various organizations, including government agencies, healthcare facilities, educational institutions, and critical infrastructure. Barron for the District of Maryland.

Ransomware 281

Ransomware Education Sales Government 281

Data Breach Today

NOVEMBER 26, 2024

New Law Calls for Better Reporting, Securing Devices and Critical Infrastructure The Australian government's proposed cybersecurity legislation passed both houses of the Parliament on Monday, formalizing the government's strategy to boost ransomware payment reporting, mandate basic cybersecurity standards for connected devices and enhance critical (..)

Ransomware 307

Ransomware Cybersecurity Government Security 307