Sen. Ron Wyden pledged to block the confirmation of Lt. Gen. Joshua Rudd as head of U.S. Cyber Command and the National Security Agency, arguing Rudd lacks digital warfare and signals-intelligence experience. Wyden also raised concerns about Rudd’s vague answers on NSA surveillance authorities, warning that his hold could force a…
Category: Cyber Security News
U.S. prosecutors allege former Air Force Major Gerald Eddie Brown conspired with convicted Chinese hacker Stephen Su Bin to provide detailed combat aircraft training to pilots in the People’s Liberation Army Air Force. Brown, who served 24 years in the U.S. Air Force and later worked for U.S. defense contractors, is…
A Genians report details how Middle Eastern state-sponsored APTs—most notably MuddyWater—conduct patient, stealthy espionage campaigns against governments and critical national infrastructure across Europe, Asia, and North America. These actors exploit human factors and legacy IT by weaponizing RMM tools and macro-laden Word documents (e.g., Cybersecurity.doc) to deliver a Rust-based payload (disguised…
Cybersecurity governance is moving to senior management under the EU’s NIS2 Directive and Ireland’s forthcoming National Cyber Security Bill, placing legal accountability for cyber risk on management boards. Boards that fail to meet Article 20 obligations face personal liability, substantial fines, and supervisory action, so organizations must scope board membership, document…
The UK government is strengthening its cyber posture with a dual strategy: a new Vulnerability Monitoring Service to speed up detection and remediation, and a government Cyber Profession to build a long-term workforce pipeline. The move has cut average fix times from nearly 50 days to eight, reduced the backlog of…
This week’s Cyber Express roundup covers major developments across space cybersecurity, AI agent vulnerabilities, long-running SD-WAN exploits, sanctions against a Russian zero-day broker, and regulatory action targeting X. It warns that threats are becoming more sophisticated and interconnected, urging organizations and governments to strengthen defenses and adapt policies in real time….
The U.S. Department of the Treasury’s Office of Foreign Assets Control sanctioned Russian national Sergey Sergeyevich Zelenyuk and his firm Matrix LLC (operating as Operation Zero) for acquiring and selling cyber exploits that threaten U.S. national security. Treasury alleges Operation Zero purchased at least eight proprietary U.S. government cyber tools stolen…
Recorded Future’s Insikt Group warns Europe to prepare for a significant escalation of coordinated Russian New Generation Warfare over the next two years, shifting from opportunistic hybrid actions to more frequent, geographically broad, and tightly coordinated campaigns that combine cyber operations, infrastructure sabotage, airspace and maritime incursions, and influence operations. Threat…
Approximately 900 Sangoma FreePBX instances remain infected with web shells after attackers exploited CVE-2025-64328 to deploy the EncystPHP backdoor starting in December 2025. Organizations are urged to update the filestore module, restrict administrative access, and block known malicious sources to contain the INJ3CTOR3 campaign. #EncystPHP #INJ3CTOR3…
Roughly 38 million people were likely impacted by a January data breach at European DIY retailer ManoMano after hackers compromised a customer support portal. The attackers, who claimed responsibility under the name Indra on BreachForums, allegedly stole names, email addresses, phone numbers, service tickets, and attachments—apparently by accessing a Zendesk instance…
SecurityWeek’s weekly roundup condenses notable cybersecurity developments, from Predator spyware bypassing iOS camera and microphone indicators to the emergence of the inexpensive Oblivion Android RAT and high-profile breaches like Odido. It also covers strategic shifts including Russian cyberattacks supporting missile strikes, CrowdStrike’s warnings about AI-enabled evasive threats, the U.S. Treasury’s public–private…
ManoMano has warned that a January 2026 compromise of a third-party customer service provider led to unauthorized extraction of personal data for roughly 38 million individuals. The company says its own systems and passwords were not accessed, has revoked the subcontractor’s access, notified authorities, and urged customers to watch for phishing and monitor accounts. #ManoMano #Zendesk
Trend Micro has released patches for two critical remote code execution vulnerabilities in its Apex One endpoint platform caused by path traversal flaws in the management console. Customers with externally exposed Apex One consoles should install Critical Patch Build 14136 or apply the SaaS updates immediately to mitigate these issues and related agent fixes. #TrendMicro #ApexOne
Google API keys embedded in client-side code can now authenticate to the Gemini AI assistant, enabling attackers who find exposed keys to access private data and make costly API calls. Researchers found nearly 3,000 live exposed keys across public sites, prompting Google and TruffleSecurity to implement mitigations and advise developers to audit and rotate keys. #Gemini #Google
Yurii Nazarenko pleaded guilty to running OnlyFake, an AI-driven subscription site that generated and sold over 10,000 realistic counterfeit passports, driver’s licenses, and Social Security cards to customers worldwide. U.S. authorities say the platform was used to bypass KYC checks at banks and cryptocurrency exchanges; Nazarenko was extradited from Romania, agreed to forfeit $1.2 million, and faces up to 15 years in prison. #OnlyFake #YuriiNazarenko #FBI #KYC #PatriotAct #404Media