Category
Government
- 23
- stories
- OCT 6
- latest
AI May Be the Future, But Talent is What Builds Security
While AI is reshaping the threat landscape, the people defending against those threats remain vital.
DENNIS FISHER · OCT 6 · 3 min
All Government
Linux Foundation Backs New TRACE AI Security Standard
TRACE aims to help prove that sensitive data in organizations is being handled “according to policy” by AI agents and open weight models.
Lindsey O'Donnell-Welch · 2 min
Unsealed DoJ Indictment Targets Bulletproof Hosting Services
Media Land and ML.Cloud offer bulletproof hosting services that help keep threat actors and their infrastructure hidden from law enforcement.
Lindsey O'Donnell-Welch · 2 min
US Sanctions First VPN Cybercriminal Service
First VPN has been active for more than a decade and is specifically designed for ransomware operators, fraud groups, and other cybercriminals trying to hide malicious activity from law enforcement.
Lindsey O'Donnell-Welch · 2 min
Alleged Silk Typhoon Hacker Extradited to US
The hacker was allegedly involved in Hafnium campaigns that targeted Exchange server flaws and in attacks against COVID-19 research institutions.
Lindsey O'Donnell-Welch · 2 min
Firestarter Malware Sparks Updated CISA Emergency Directive
CISA is warning of a persistent backdoor called Firestarter that’s being used in attacks against Cisco Firepower and Secure Firewall products.
Lindsey O'Donnell-Welch · 4 min
US Gov: Iran-Linked Actors Targeting Critical Infrastructure PLCs
The advisory comes amid the ongoing conflict between the U.S. and Iran. CISA said Iran-linked APT campaigns targeting U.S. orgs have recently escalated.
Lindsey O'Donnell-Welch · 2 min
EU Sanctions Iranian and Chinese Companies for Targeting Member Nations
The new sanctions list includes two China-based technology companies, two of their co-founders, and an Iranian firm, all implicated in a range of attacks from corporate espionage and critical infrastructure disruption to disinformation campaigns.
Dennis Fisher · 2 min
APT28 Reemerges with Modern Espionage Arsenal, Code Tied to 2010s Operations
The modern Sednit arsenal is centered on two highly-developed implants, deployed systematically in tandem to ensure persistent access.
Dennis Fisher · 3 min
Google: Commercial Surveillance Vendors Dominated Zero-Day Exploitation in 2025
Out of 42 unique zero days tracked by Google in 2025, 18 were attributed to CSVs, while 15 were linked to state-sponsored espionage groups.
Decipher · 3 min
Q&A: Tod Beardsley on How to Use CISA’s KEV Catalog
Without context, the KEV catalog is just a very large collection of data. Tod Beardsley is the former CISA KEV section chief, and he recently released a paper called KEVology that provides key context and evaluates the value of certain enrichment signals.
Dennis Fisher · 4 min
Cisco, NSA Warn of Attacks Targeting Catalyst SD-WAN Zero Day
Cisco released software updates on Feb. 25 to fix the vulnerability, which affects both on-premises and cloud deployments of the Catalyst SD-WAN Controller.
Dennis Fisher · 2 minFormer US Defense Contractor Sentenced to Jail For Selling Exploits
In a parallel Tuesday announcement, the Treasury Department also sanctioned the exploit broker network that had acquired the tools.
Decipher · 3 min
Singapore Says China-Linked Threat Actors Targeted Telecom Sector
UNC3886 is a Chinese espionage group known for targeting defense, tech, and telecom organizations across both the U.S. and Asia-Pacific-Japan regions.
Decipher · 2 min
US Gov Directive Cracks Down on Unsupported Edge Devices
CISA said potential exploitation of flaws in unsupported edge devices creates “a significant threat to federal property.”
Decipher · 2 minUK Warns of DoS Attacks by Russian Hacktivist Group NoName057(16)
The network was linked to various attacks in 2023 and 2024, including ones against Swedish authorities and bank websites, and a wave of 14 different attacks on more than 250 German companies.
Decipher · 2 minMicrosoft Disrupts RedVDS Cybercrime Platform
The takedown marks a significant blow to the cybercrime-as-a-service ecosystem, which fuels large-scale, automated fraud.
Dennis Fisher · 3 min
‘We Fail a Lot’: How Two Security Pioneers Keep Innovating
From their roles as the driving forces behind pioneering web appsec firm WhiteHat Security to building out enterprise security programs to breaking large portions of the web, Jeremiah Grossman and Robert Hansen have unique viewpoints on what works and what doesn’t.
Dennis Fisher · 1 min
