News

Also axes secure software mandates - optional is the new secure, apparently

President Donald Trump late Friday signed a cybersecurity-focused executive order that, in the White House's words, "amends problematic elements of Obama and Biden-era Executive Orders."…

Chocolate Factory fixes issue, pays only $5K

A researcher has exposed a flaw in Google's authentication systems, opening it to a brute-force attack that left users' mobile numbers up for grabs.…

A milestone in cyberattack recovery – but deliveries will take a while and normal service not yet back

UK retailer Marks & Spencer has reinstated online orders for some customers, marking a major milestone in its recovery from a cyberattack in April.…

Majority of exposures located in the US, including datacenters, healthcare facilities, factories, and more

Security researchers managed to access the live feeds of 40,000 internet-connected cameras worldwide and they may have only scratched the surface of what's possible.…

Swift-based containerization framework aims to improve performance and security

Apple on Monday unveiled an open source containerization framework for creating and running Linux container images on the Mac.…

United Natural Foods shut down some of its systems on June 5 after spotting network intruders

North American grocery wholesaler United Natural Foods told regulators that a cyber incident temporarily disrupted operations, including its ability to fulfill customer orders.…

Big tech can't be bothered to fight crime. It can barely be bothered even to say so

Opinion  A lot of our tech world is nightmarish, but sometimes this is literally true.…

SentinelOne discovered the campaign when they tried to hit the security vendor's own servers

An IT services company, a European media group, and a South Asian government entity are among the more than 75 companies where China-linked groups have planted malware to access strategic networks should a conflict break out.…

Why an obsession with technology prevents us from reducing human-initiated cybersecurity breaches

Partner content  Cybersecurity leaders are fighting an invisible war, not just with threat actors but within their own organizations. It's a conflict I've spent a lot of time reflecting on, especially as I think about why certain leaders within organizations make the decisions they do.…

PLUS: Hitachi turns greybeards into AI agents; Tiananmen anniversary censorship; AWS in Taiwan; and more!

China’s space agency has revealed its Tianwen 2 probe has unfurled a ‘solar wing’.…

PLUS: Doxxers jailed; Botnets bounce back; CISA questioned over app-vetting program closure; And more

Infosec in Brief  If a cyberattack hit critical infrastructure in the US, it would likely crumble, former deputy national security adviser and NSA cybersecurity director Anne Neuberger said last week.…

Security, not model performance, is what's stalling adoption

Interview  Before AI becomes commonplace in enterprises, corporate leaders have to commit to an ongoing security testing regime tuned to the nuances of AI models.…

OpenAI boots accounts linked to 10 malicious campaigns

Fake IT workers possibly linked to North Korea, Beijing-backed cyber operatives, and Russian malware slingers are among the baddies using ChatGPT for evil, according to OpenAI's latest threat report.…

Destructive malware has been a hallmark of Putin's multi-modal war

A new strain of wiper malware targeting Ukrainian infrastructure is being linked to pro-Russian hackers, in the latest sign of Moscow's evolving cyber tactics.…

The cash has been frozen for more than two years

The US is looking to finally capture the $7.74 million it froze over two years ago after indicting alleged money launderers it claims are behind North Korean IT worker schemes.…

Don't negotiate unless you must, and if so, drag it out as long as you can

Feature  So, the worst has happened. Computer screens all over your org are flashing up a warning that you've been infected by ransomware, or you've got a message that someone's been stealing information from your server.…

Any info on Maxim Rudometov and his associates? There's $$$ in it for you

The US government is offering up to $10 million for information on foreign government-backed threat actors linked to the RedLine malware, including its suspected developer, Maxim Alexandrovich Rudometov.…

Re-selling info from an earlier breach? Probably. But which one?

AT&T is investigating claims that millions of its customers' data are listed for sale on a cybercrime forum in what appears to be a re-release from an earlier hack.…

Trump-pardoned hacker Chris Wade will join the company as CTO

Cellebrite has announced a $170 million deal to buy Corellium, bringing together two companies that have made names for themselves by helping law enforcement break into encrypted devices.…

Plus: Plankey's confirmation process 'temporarily delayed'

Sean Cairncross, President Donald Trump's nominee to serve as national cyber director, doubled down on taking offensive cyber actions against foreign adversaries during a Senate homeland security committee nomination hearing on Thursday, and refused to condemn the president's proposed cuts to the main US cyber defense agency.…