Government

74,000 Fortinet firewall credentials exposed in FortiBleed data leak

74,000 Fortinet firewall credentials exposed in FortiBleed data leak 2026-06-18 at 15:10 By Zeljka Zorz A Russian-speaking cybercriminal group has stolen credentials contained in the configuration files of nearly 74,000 Fortinet firewalls and VPN gateways around the world. The data was accidentally exposed by the group on a server, along with other artifacts and tools, […]

74,000 Fortinet firewall credentials exposed in FortiBleed data leak Read More »

The checklist problem behind critical infrastructure cyber safety

The checklist problem behind critical infrastructure cyber safety 2026-06-17 at 07:00 By Anamarija Pogorelec An asset owner can meet major federal cyber compliance standards and still run equipment that lacks the engineering to withstand an attack or a failure. New research from George Mason University examines how United States cyber policy defines reasonable care for […]

The checklist problem behind critical infrastructure cyber safety Read More »

White House Issues Memo to Bolster NSS Cybersecurity

White House Issues Memo to Bolster NSS Cybersecurity 2026-06-16 at 14:41 By Ionut Arghire NSPM-12 establishes a clear structure for NSS cybersecurity governance and accountability and reestablishes CNSS. The post White House Issues Memo to Bolster NSS Cybersecurity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

White House Issues Memo to Bolster NSS Cybersecurity Read More »

Chinese hackers breached North American research institutions via REDCap servers

Chinese hackers breached North American research institutions via REDCap servers 2026-06-15 at 21:41 By Sinisa Markovic A China-linked cyber espionage operation targeted North American medical research institutions through compromised REDCap servers, using custom malware to gain persistent access and collect sensitive information, Google’s Threat Intelligence Group (GTIG) researchers found. UNC6508 exploits vulnerable REDCap servers GTIG […]

Chinese hackers breached North American research institutions via REDCap servers Read More »

Maine Disables Data Breach Portal Due to Fake Submissions 

Maine Disables Data Breach Portal Due to Fake Submissions  2026-06-15 at 11:34 By Eduard Kovacs Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action. The post Maine Disables Data Breach Portal Due to Fake Submissions  appeared first on SecurityWeek. This article is an excerpt from […]

Maine Disables Data Breach Portal Due to Fake Submissions  Read More »

Proving what a military AI model will do is the real problem

Proving what a military AI model will do is the real problem 2026-06-15 at 07:30 By Sinisa Markovic Defense contractors build AI systems that task drones automatically and propose kill-chains to support soldiers. Several of these contractors have partnered with frontier AI companies to put advanced models into military tools. Anduril works with OpenAI, Palantir […]

Proving what a military AI model will do is the real problem Read More »

CISA orders federal agencies to “patch smarter”

CISA orders federal agencies to “patch smarter” 2026-06-11 at 20:18 By Zeljka Zorz The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a Binding Operational Directive that will change how the US federal government approaches vulnerability management. The directive arrives as the patching problem has become nearly unmanageable, driven by a surge in newly […]

CISA orders federal agencies to “patch smarter” Read More »

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort 2026-06-11 at 17:12 By Sinisa Markovic Federal authorities have seized 13 internet domains allegedly used to target current and former U.S. government employees and military personnel with access to classified and sensitive information. The post FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort […]

FBI seizes 13 websites linked to alleged Chinese intelligence-gathering effort Read More »

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk 2026-06-11 at 16:01 By Ionut Arghire The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries. The post CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk appeared first on SecurityWeek. This […]

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk Read More »

What OMB M-26-14 Means for Your Agency and Where to Focus Now

What OMB M-26-14 Means for Your Agency and Where to Focus Now 2026-06-09 at 18:19 By Rachael Clay OMB M-26-14 introduces a significant change in how federal agencies approach logging, monitoring, and incident response. Rather than emphasizing volume and retention of log data, the memo centers on how effectively agencies can use telemetry to support detection, […]

What OMB M-26-14 Means for Your Agency and Where to Focus Now Read More »

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) 2026-06-08 at 14:07 By Zeljka Zorz A vulnerability (CVE-2026-28318) that can be exploited to crash SolarWinds Serv-U file transfer servers is being leveraged by attackers in the wild, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Friday. The agency has ordered US federal civilian […]

CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318) Read More »

Trump Signs Executive Order That Invites Vetting of Top AI Models for National Security Risks

Trump Signs Executive Order That Invites Vetting of Top AI Models for National Security Risks 2026-06-02 at 23:10 By Associated Press The order establishes a framework for the federal government to vet the national security risks of the most advanced AI systems for up to a month before their public release. The post Trump Signs […]

Trump Signs Executive Order That Invites Vetting of Top AI Models for National Security Risks Read More »

EU organizations buckle under rising compliance pressure

EU organizations buckle under rising compliance pressure 2026-06-01 at 08:19 By Sinisa Markovic Cybersecurity governance in the EU is shifting under expanding frameworks such as NIS2 and DORA, while AI raises new questions for security teams. What the future brings is hard to predict, and organizations must find a way to cope. Antonija Vojnović, Governance, […]

EU organizations buckle under rising compliance pressure Read More »

Lithuania Suspects Foreign Involvement in Data Leak of Over 600,000 National Register Entries

Lithuania Suspects Foreign Involvement in Data Leak of Over 600,000 National Register Entries 2026-05-26 at 13:38 By Associated Press Lithuanian authorities are on high alert after a massive data leak involving more than 600,000 entries from national data registers. The post Lithuania Suspects Foreign Involvement in Data Leak of Over 600,000 National Register Entries appeared […]

Lithuania Suspects Foreign Involvement in Data Leak of Over 600,000 National Register Entries Read More »

US states step up cyber defenses to protect local communities

US states step up cyber defenses to protect local communities 2026-05-25 at 14:35 By Anamarija Pogorelec U.S. state governments are taking on a larger role in cybersecurity to help protect local communities and essential services. Many states are building state-led cyber defense programs, including cybersecurity clinics, regional security operations centers (RSOCs), and state cyber corps […]

US states step up cyber defenses to protect local communities Read More »

Suspected KimWolf botnet admin arrested over DDoS-for-hire operation

Suspected KimWolf botnet admin arrested over DDoS-for-hire operation 2026-05-22 at 15:08 By Sinisa Markovic U.S. and Canadian authorities arrested and charged a Canadian man accused of operating the KimWolf DDoS botnet, a service linked to attacks that infected more than one million devices worldwide. Jacob Butler, 23, of Ottawa, Canada, also known online as “Dort,” […]

Suspected KimWolf botnet admin arrested over DDoS-for-hire operation Read More »

Webworm APT targets European government organizations with new backdoors

Webworm APT targets European government organizations with new backdoors 2026-05-20 at 17:48 By Anamarija Pogorelec ESET has released an analysis of the 2025 activity of Webworm, a China-aligned APT group tracked as Space Pirates and UAT-8302. Active since at least 2022, the group initially focused on targets in Asia, but has recently expanded its operations […]

Webworm APT targets European government organizations with new backdoors Read More »

In Other News: Big Tech vs Canada Encryption Bill, Cisco’s Free AI Security Spec, Audi App Flaws

In Other News: Big Tech vs Canada Encryption Bill, Cisco’s Free AI Security Spec, Audi App Flaws 2026-05-15 at 18:30 By SecurityWeek News Other noteworthy stories that might have slipped under the radar: Nvidia cloud gaming data breach, Android 17 security upgrades, FBI warning after ShinyHunters hacks Canvas. The post In Other News: Big Tech […]

In Other News: Big Tech vs Canada Encryption Bill, Cisco’s Free AI Security Spec, Audi App Flaws Read More »

Government to Scrutinize Instructure Over Canvas Disruption, Data Breach

Government to Scrutinize Instructure Over Canvas Disruption, Data Breach 2026-05-13 at 15:13 By Ionut Arghire The Committee on Homeland Security has requested to be briefed on the incident and Instructure’s remediation steps. The post Government to Scrutinize Instructure Over Canvas Disruption, Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Government to Scrutinize Instructure Over Canvas Disruption, Data Breach Read More »

Scroll to Top