Illinois Representative Delia Ramirez has been appointed as the top Democrat on the House Homeland Security Committee's Cybersecurity and Infrastructure Protection Subcommittee, replacing Eric Swalwell following his resignation from Congress.
New research from CalTech and Google suggests fault-tolerant quantum computers capable of breaking classical encryption may need far fewer qubits than previously thought, compressing the window for post-quantum migration.
Researchers at Censys have identified more than 5,200 internet-exposed Rockwell Automation/Allen-Bradley PLCs potentially vulnerable to Iranian state-backed attackers, with nearly 3,900 of those devices located in the United States.
A previously undocumented phishing-as-a-service platform called VENOM is targeting Microsoft account credentials belonging to CEOs, CFOs, and VPs across multiple industries, using AiTM techniques and QR code lures.
Researchers at Comparitech discovered 179 industrial control devices accessible without authentication via the Modbus protocol, as the US government warns of state-sponsored attacks targeting programmable logic controllers in critical infrastructure.
A newly discovered Lua-based malware called LucidRook is being deployed against non-governmental organizations and universities in Taiwan via spear-phishing campaigns. Cisco Talos attributes the threat to a group tracked as UAT-10362.
Senate Judiciary Committee Chair Chuck Grassley has launched a congressional inquiry into eight major technology companies, citing failures to provide adequate data to a child exploitation cyber tipline operated by NCMEC.
A ransomware attack on Dutch healthcare software vendor ChipSoft on April 7 forced the company to disable key digital platforms used by roughly 70% of Netherlands hospitals, triggering widespread logistical disruptions.
Microsoft researchers discovered a critical intent-redirection vulnerability in EngageLab's EngageSDK, a third-party Android SDK embedded in cryptocurrency wallet apps with over 30 million combined installs.
Google has launched Device Bound Session Credentials (DBSC) in Chrome 146 for Windows, cryptographically tying authentication sessions to a user's device so that stolen cookies become worthless to attackers.