CISA Guidance on Isolating Vital Systems
The US and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack.
Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
The US and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack.
The Trump administration has asked the Supreme Court to allow enforcement of an executive order restricting mail-in voting ahead of the November midterm elections.
Anthropic's AI system, Claude Mythos, found weaknesses in HAWK and AES encryption algorithms, highlighting the need for ongoing cryptographic analysis and PQC readiness.
The Senate confirmed Jay Clayton as the next director of national intelligence with a 51-47 vote, capping a turbulent process delayed by President Donald Trump's initial cancellation of his confirmation hearing.
Arista has patched a maximum-severity command injection vulnerability in VeloCloud Orchestrator, which is being actively exploited in attacks, allowing remote attackers to access privileged functionality.
Over 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller interface.
A coordinated cyberattack disrupted water and wastewater utilities in over 30 Minnesota communities, with the state's technology bureau providing guidance on response efforts.
Single sign-on (SSO) simplifies access but concentrates risk, as seen in the 2025 University of Pennsylvania breach, where attackers compromised a PennKey SSO account, resulting in the theft of data on 1.2 million individuals.
Tal Kollander's journey from a black hat hacker to a cybersecurity defender is a fascinating story of transformation, driven by her curiosity and passion for computer security.