Government

Iranian cyber activity hits US energy, water, and government networks

Iranian cyber activity hits US energy, water, and government networks 2026-04-08 at 15:06 By Anamarija Pogorelec U.S. government agencies on Tuesday warned American organizations about ongoing cyber activity targeting OT and PLC devices, including those manufactured by Rockwell Automation and Allen-Bradley, across multiple critical infrastructure sectors. The activity has been attributed to Iranian-affiliated APT actors […]

Iranian cyber activity hits US energy, water, and government networks Read More »

US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking

US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking 2026-04-08 at 15:06 By Eduard Kovacs The APT28 threat group exploited vulnerable TP-Link and MikroTik routers to conduct adversary-in-the-middle (AitM) attacks. The post US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking appeared first on SecurityWeek. This article is an excerpt from

US Disrupts Russian Espionage Operation Involving Hacked Routers and DNS Hijacking Read More »

White House Seeks to Slash CISA Funding by $707 Million

White House Seeks to Slash CISA Funding by $707 Million 2026-04-07 at 11:31 By Eduard Kovacs The Trump administration says the FY2027 budget refocuses CISA on its core mission: protecting federal agencies and critical infrastructure. The post White House Seeks to Slash CISA Funding by $707 Million appeared first on SecurityWeek. This article is an

White House Seeks to Slash CISA Funding by $707 Million Read More »

TrueConf Zero-Day Exploited in Asian Government Attacks

TrueConf Zero-Day Exploited in Asian Government Attacks 2026-04-03 at 17:52 By Ionut Arghire A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads. The post TrueConf Zero-Day Exploited in Asian Government Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

TrueConf Zero-Day Exploited in Asian Government Attacks Read More »

TrueConf zero-day vulnerability exploited to target government networks

TrueConf zero-day vulnerability exploited to target government networks 2026-04-02 at 12:02 By Sinisa Markovic Suspected China-nexus attackers have leveraged a zero-day vulnerability (CVE-2026-3502) in the TrueConf client application to distribute malware within government networks in Southeast Asia, Check Point researchers discovered. Malicious client update attack chain (Source: Check Point) Trusted update mechanism turned into attack

TrueConf zero-day vulnerability exploited to target government networks Read More »

Financial groups lay out a plan to fight AI identity attacks

Financial groups lay out a plan to fight AI identity attacks 2026-04-01 at 10:34 By Mirko Zorz Generative AI tools have brought the cost of deepfake production low enough that criminals and state-sponsored actors now use them routinely against financial institutions. A joint paper from the American Bankers Association, the Better Identity Coalition, and the

Financial groups lay out a plan to fight AI identity attacks Read More »

How LevelBlue’s FedRAMP Authorization Removes the Burden of CMMC Federal Compliance from Clients

How LevelBlue’s FedRAMP Authorization Removes the Burden of CMMC Federal Compliance from Clients 2026-03-30 at 20:37 By Navigating the labyrinth of the U.S. federal procurement system, especially for Defense Industrial Base (DIB) companies, can be challenging, particularly when trying to meet stringent cybersecurity compliance standards like theCybersecurity Maturity Model Certification (CMMC).   This article is

How LevelBlue’s FedRAMP Authorization Removes the Burden of CMMC Federal Compliance from Clients Read More »

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521) 2026-03-28 at 11:30 By Zeljka Zorz A critical unauthenticated remote code execution vulnerability (CVE-2025-53521) in F5’s BIG-IP Access Policy Manager (APM) solution is under active exploitation, the US Cybersecurity and Infrastructure Security Agency warned on Friday. CISA added the flaw to its Known Exploited Vulnerabilities

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521) Read More »

DoE Publishes 5-Year Energy Security Plan

DoE Publishes 5-Year Energy Security Plan 2026-03-25 at 02:08 By Kevin Townsend CESER’s Project Armor is a five year initiative to harden the US critical energy infrastructure, including strengthening energy systems ‘to prevent and recover from wildfires and other hazards’. The post DoE Publishes 5-Year Energy Security Plan appeared first on SecurityWeek. This article is

DoE Publishes 5-Year Energy Security Plan Read More »

Uncle Sam closes the door on all new foreign-made routers

Uncle Sam closes the door on all new foreign-made routers 2026-03-24 at 17:04 By Sinisa Markovic The US Federal Communications Commission (FCC) has imposed a ban on all new routers manufactured overseas being imported into and sold within the United States. The post Uncle Sam closes the door on all new foreign-made routers appeared first

Uncle Sam closes the door on all new foreign-made routers Read More »

Russian hackers go after high-value targets through Signal

Russian hackers go after high-value targets through Signal 2026-03-23 at 11:20 By Sinisa Markovic Russian intelligence-linked hackers are targeting commercial messaging platforms, with Signal a primary focus, the FBI and CISA warn. The campaign is aimed at individuals of intelligence interest, including government personnel, journalists, and others with access to sensitive communications. It is believed

Russian hackers go after high-value targets through Signal Read More »

Terminated contract led to $2.5 million cyber extortion scheme

Terminated contract led to $2.5 million cyber extortion scheme 2026-03-20 at 19:32 By Sinisa Markovic A federal jury convicted Cameron Curry, 27, a Charlotte resident, of carrying out an extensive cyber extortion scheme targeting a Washington, D.C.-based international technology company. He faces up to two years in prison on each of the six charges. Curry,

Terminated contract led to $2.5 million cyber extortion scheme Read More »

US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites

US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites 2026-03-20 at 19:32 By Eduard Kovacs The US has seized several domains used by Handala in cyber-enabled psychological operations. The post US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites appeared first on SecurityWeek. This article is an excerpt from

US Confirms Handala Link to Iran Government Amid Takedown of Hackers’ Sites Read More »

Authorities disrupt four IoT botnets behind record DDoS attacks

Authorities disrupt four IoT botnets behind record DDoS attacks 2026-03-20 at 12:46 By Sinisa Markovic The U.S. Justice Department and international partners have disrupted four IoT botnets linked to DDoS attacks that reached 30 terabits per second, among the largest ever recorded. The post Authorities disrupt four IoT botnets behind record DDoS attacks appeared first

Authorities disrupt four IoT botnets behind record DDoS attacks Read More »

4chan shrugs off UK regulator, refuses to pay £520,000 in fines over online safety violations

4chan shrugs off UK regulator, refuses to pay £520,000 in fines over online safety violations 2026-03-19 at 16:54 By Sinisa Markovic The U.K.’s media regulator Ofcom fined 4chan £450,000 under the Online Safety Act for failing to introduce age checks to stop children from accessing pornographic content on its platform. 4chan is an online forum

4chan shrugs off UK regulator, refuses to pay £520,000 in fines over online safety violations Read More »

Secure endpoint management systems immediately, CISA urges

Secure endpoint management systems immediately, CISA urges 2026-03-19 at 14:59 By Sinisa Markovic The US Cybersecurity and Infrastructure Security Agency (CISA) warns that the cyberattack on Stryker Corporation serves as a signal to U.S. organizations that foreign cyber activity tied to Middle East conflicts may be spilling into their operations. Attackers breached Stryker’s internal Microsoft

Secure endpoint management systems immediately, CISA urges Read More »

EU Sanctions Chinese, Iranian Firms Supporting Hacking Operations

EU Sanctions Chinese, Iranian Firms Supporting Hacking Operations 2026-03-18 at 17:05 By Ionut Arghire The sanctions target two Chinese individuals, two Chinese companies, and one Iranian firm involved in hacking EU member states. The post EU Sanctions Chinese, Iranian Firms Supporting Hacking Operations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

EU Sanctions Chinese, Iranian Firms Supporting Hacking Operations Read More »

Spotlight Report: Cyber Resilience and Business Impact in US SLED for 2026

Spotlight Report: Cyber Resilience and Business Impact in US SLED for 2026 2026-03-18 at 16:02 By Threat groups are uniquely open-minded when selecting their targets. They may issue platitudes about avoiding schools or critical infrastructure, but data from LevelBlue’s just-releasedSpotlight Report: Cyber Resilience and Business Impact in US SLED shows this is, unsurprisingly, false. This article

Spotlight Report: Cyber Resilience and Business Impact in US SLED for 2026 Read More »

UK Companies House Exposed Details of Millions of Firms 

UK Companies House Exposed Details of Millions of Firms  2026-03-17 at 17:45 By Eduard Kovacs The government agency confirmed the vulnerability could have been exploited to obtain company details and alter records.   The post UK Companies House Exposed Details of Millions of Firms  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

UK Companies House Exposed Details of Millions of Firms  Read More »

EU sanctions Chinese company behind 65,000-device hack

EU sanctions Chinese company behind 65,000-device hack 2026-03-17 at 14:26 By Sinisa Markovic The EU Council has sanctioned companies from China and Iran, along with two individuals, over cyberattacks targeting its member states and partners. “Those listed are subject to an asset freeze, while EU citizens and companies are prohibited from providing them with funds

EU sanctions Chinese company behind 65,000-device hack Read More »

Scroll to Top