Postal Service moves to finalize mail ballot regs before SCOTUS ruling

The U.S. Postal Service is finalizing regulations tied to President Donald Trump’s March executive order that could give the federal government broad authority over mail-in ballot eligibility and processing. Although the rules have been blocked by lower courts, USPS says it is moving ahead so the policy can be in place before the 2026 election while legal challenges continue. #USPS #DonaldTrump #Massachusetts

Read More
TCP 142: Taiwan Hit by AI-Assisted Attack, OpenAI’s Training Pause, and .74B in Capital

The Cybersecurity Pulse covers major developments including Taiwan’s AI-assisted intrusion campaign, OpenAI’s tightened safety controls after the Hugging Face incident, and new threat activity involving Siemens industrial controllers, a Windows zero-day used by Lazarus, and active exploitation of MLflow. It also highlights vendor and market moves such as Google Cloud’s post-quantum roadmap, Signal’s automatic key verification, Fortinet’s acquisition of Virtue AI, Cribl’s purchase of Radiant Security technology, and Mindgard’s $30 million funding round. #Taiwan #OpenAI #HuggingFace #Siemens #Lazarus #MLflow #GoogleCloud #Signal #Fortinet #VirtueAI #Cribl #RadiantSecurity #Mindgard

Read More
Named Pipes Under Attack: Securing Windows Interprocess Communication

Named pipes on Windows can become a security boundary when privileged services communicate with less trusted applications, so they must be protected with restrictive access control, identity verification, and careful authorization. The article explains how to defend against confused deputy attacks, untrusted input, denial-of-service conditions, and remote exposure by using narrow protocols, bounded resources, and secure impersonation practices. #ThreatLocker #FaridMustafayev #NamedPipeServerStream #GetNamedPipeClientProcessId #ImpersonateNamedPipeClient #RevertToSelf #WinVerifyTrust

Read More
Hackers infect Android car head units with proxy botnet malware

A supply-chain attack against Android-based car head units is spreading malware through a legitimate DoFun update app, turning compromised devices into proxy botnet nodes and tools for ad fraud. Kaspersky linked the campaign to the MoYu group and identified JarService, which downloads additional payloads, reports device details, and supports commands used for monetization. #MoYu #DoFun #JarService #TWCore #BadBox #zhima

Read More
Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen

The Hospital for Sick Children (SickKids) disclosed a data theft incident tied to a third-party software application that may have exposed personal information belonging to current and former employees, job applicants, and employees of related organizations. The hospital said no clinical systems or patient information were affected and has offered impacted…

Read More
U.S. Bank says breach claims related to fourth-party incident

U.S. Bancorp says LockBit’s recent data-theft claims stem from a contractor-related incident involving a third-party, not from any compromise of its own systems or network. The bank says it has informed law enforcement and is monitoring the situation while LockBit continues to threaten a leak without providing proof. #U.S.Bancorp #LockBit #RecordedFutureNews…

Read More
Lawmakers call for investigation into impact of CISA staffing cuts

Members of Congress have asked the Government Accountability Office to review how staffing cuts at CISA have affected its ability to protect critical infrastructure and respond to growing threats. The letter raises concerns about lost expertise, reduced responsiveness, and proposed budget cuts that could further weaken the agency’s mission, especially amid…

Read More
Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight

ThreatFabric, Acronis, and Zimperium reported new activity from banking trojans including Manic, Grandoreiro, and ToxicPanda 2.0, all designed to steal credentials, siphon data, and take control of infected devices. The campaigns are targeting banks, fintech services, and users across Ukraine, Latin America, Europe, and multiple other countries, with improved evasion and…

Read More