US scrambles to recoup $1M+ nicked by NORKs
US scrambles to recoup $1M+ nicked by NORKs Summary The US Department of Justice is trying to recover roughly 1,008,902.606307 Tether tokens (about $1,008,564.72) that the FBI says were stolen…
Fed cloud contracts up 2x this year after red tape slashing
Fed cloud contracts up 2x this year after red tape slashing Summary The General Services Administration (GSA) has approved 114 cloud services for US government use in FY2025 — more…
What is data in use?
What is data in use? Summary Data in use is data that is actively being accessed, processed, updated or erased by a system, application, user or device. It is not…
Sloppy AI Defenses Take Cybersecurity Back To the 1990s, Researchers Say
Sloppy AI Defenses Take Cybersecurity Back To the 1990s, Researchers Say Summary Researchers and speakers at Black Hat USA 2025 (and related events) warned that the rush to build and…
Russia Is Suspected To Be Behind Breach of Federal Court Filing System
Russia Is Suspected To Be Behind Breach of Federal Court Filing System Content summary Investigators have found evidence suggesting Russia is at least partly responsible for a recent intrusion into…
Phishers Abuse Microsoft 365 to Spoof Internal Users
Phishers Abuse Microsoft 365 to Spoof Internal Users Summary Cybercriminals are abusing Microsoft 365’s “Direct Send” feature to make phishing emails appear to come from internal colleagues. By routing messages…
SentinelOne Acquires AI Startup Prompt Security
SentinelOne Acquires AI Startup Prompt Security Summary SentinelOne has agreed to acquire Prompt Security — a two‑year‑old AI security start‑up — for an undisclosed sum (reports estimate about $250 million).…
Google Gemini AI Bot Hijacks Smart Homes, Turns Off the Lights
Google Gemini AI Bot Hijacks Smart Homes, Turns Off the Lights Summary At Black Hat USA researchers demonstrated how Google’s Gemini can be manipulated to control smart-home devices using an…
Attackers Exploit Critical Trend Micro Apex One Zero-Day Flaw
Attackers Exploit Critical Trend Micro Apex One Zero-Day Flaw Summary Trend Micro disclosed two critical command-injection vulnerabilities in the Apex One Management Console (CVE-2025-54948 and CVE-2025-54987) that allow arbitrary code…
What ‘CMMC 3.0’ Really Means for Government Contractors
What ‘CMMC 3.0’ Really Means for Government Contractors Summary This commentary from Kyle Dewar (Tanium) explains what the anticipated CMMC 3.0 update means for companies in the US defence industrial…