Pennsylvania budget boosts cybersecurity and digital services funding
The newly enacted budget allocates an additional $10 million for cybersecurity initiatives and $3.7 million for the Commonwealth Office of Digital Experience...
SC Media
20 articles
The Breached WiFi AI Ports... What? - PSW #939
Taiwan confirms AI-assisted cyberattack on government systems
One expert said it's not the first AI-enabled attack on a government network -- it's the first one we've heard about.
To compete with China, America must deliver at home
China competes by building at scale. America’s answer is to build with speed, security and accountability — and measure success by whether life improves for ...
Operating inside the lethal trifecta: Blast radius reduction in AI agent deployments
Seven things security teams can start doing today to reduce risk.
Botnets before the ballots: US midterms at risk?
Here’s what election security teams need to consider ahead of the elections this fall.
Spectre vulnerabilities found on commercial RISC-V chips
Academic researchers from the CISPA Helmholtz Center for Information Security and KU Leuven have demonstrated that commercially available out-of-order RISC-V...
Akira ransomware attacker uses Safe Mode reboot to evade EDR
The ransomware payload ultimately failed to deploy due to insufficient virtual memory.
Thailand plans mandatory multi-factor authentication after massive data leak
The Digital Economy and Society Minister is seeking cabinet approval for compulsory multi-factor authentication across all government systems.
Uber Freight investigating data security incident after Helix claims breach
The incident at Uber Freight, the logistics arm of the ride-sharing giant, comes after the Helix group listed the company on its data leak site on August 6, ...
Colombia's Ministry of Justice hit by ransomware attack
The attack, which impacted services related to illicit-drug monitoring and legal processes, followed a warning from Colombia's national CERT about increased ...
Who owns the agent? Identity governance for autonomous AI
Here's why AI agents must be treated as a new type of identity -- yet always must be tied to a human.
LiteLLM supply chain attack impacted over 2,500 organizations
The compromise of LiteLLM, a Python library and proxy server, occurred indirectly.
New 'Plug and Pwn' attacks exploit Windows Plug and Play for SYSTEM privileges
Security researchers Alejandro Hernando and Borja Martínez demonstrated attacks at DEF CON 34 that exploit Windows' automatic hardware identification and dri...
Trump administration lifts ban on TikTok for federal devices
The ban, introduced in 2022, was a response to concerns that TikTok's parent company, ByteDance, had ties to the Chinese government, raising fears about data...
Critical VMware vCenter flaw actively exploited in 47 countries
Unspecified APT group has made attacks across 361 unique IP addresses in 47 countries.
The vulnerability flood is here. Here’s what it means – and how to prepare
We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.
The cybersecurity talent shortage was never real
Our industry has to face that we can’t out-hire the number of alerts SOCs create – we have to automate.
How to Evaluate Cyber Risk Quantification and GRC Reporting Platforms
Consider the Decision Chain, Not the Dashboard
Signal introduces automatic key verification to combat man-in-the-middle attacks
The new AKV feature is designed to combat man-in-the-middle attacks, where an adversary could intercept messages by corrupting Signal's centralized directory...