House Intel Bill Boosts State & Local Cybersecurity
The House Intelligence Committee has approved a bill to enhance cybersecurity for state and local governments through a cyberthreat intelligence sharing pilot program.
Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
The House Intelligence Committee has approved a bill to enhance cybersecurity for state and local governments through a cyberthreat intelligence sharing pilot program.
FedRAMP 20X replaces narrative-heavy controls with Key Security Indicators, requiring organizations to continuously prove their security posture with machine-readable evidence.
The US State Department will restrict visas for cybercriminals, including scammers and sextortionists, and their family members, in an effort to combat foreign-based scams.
Russian hackers exploit a Zimbra zero-click flaw to steal email data from organizations, using a combination of phishing attacks and the CVE-2025-66376 vulnerability.
Check Point's SmartConsole GUI admin panel has a zero-day flaw, tracked as CVE-2026-16232, allowing unauthenticated attackers to obtain an application login token with administrator privileges.
Vibe-coded apps are found to be riddled with exploitable security flaws, with 434 issues discovered in a recent study, highlighting the need for improved security measures in AI-assisted development.
The US government warns of Iranian hackers targeting industrial control systems made by Siemens, Schneider Electric, and Rockwell Automation, highlighting the need for proactive defenses.
The FakeGit campaign has pushed SmartLoader and StealC malware through 7,600 malicious GitHub repositories, accumulating over 14 million downloads, by using a technique called 'agentbaiting' to increase visibility to AI agents.
A self-propagating malware strain, Sandworm_Mode, is targeting AI coding assistants and software developers' automated workflows, spreading through code repositories with minimal detection.