CJIS Security Policy v6.1 updates the modernized framework with stronger encryption requirements, monthly vulnerability scanning, and continued emphasis on identity, MFA, and password controls for protecting Criminal Justice Information. Organizations should confirm current audit expectations with their CSA and close identity gaps now rather than waiting for controls to become sanctionable. #CJIS #NISTSP80053 #SpecopsPasswordPolicy #SpecopsSecureAccess #SpecopsDeviceTrust #MichiganStatePolice #TexasCSAs
The Rust project warned that attackers are using fake job offers and contract opportunities to lure Rust developers and crate owners into video calls, where they try to steal credentials and push malicious packages. The campaign has been linked to earlier incidents involving the arrayref crate and other Rust developers, with…
RatHat is a new Android trojan that uses generative AI to better control infected devices, steal credentials, and maintain persistence through a multi-stage infection chain. Zimperium says the malware likely came from a Chinese threat actor and combines fake app overlays, shell access, and reverse tunnels to enable full device takeover….
Accenture has completed its majority investment in Dragos, and Dragos has also finalized the acquisitions of NetRise and runZero to expand its OT security platform. The combined capabilities add firmware-level exposure insight, asset discovery, and software supply chain visibility for critical infrastructure defense. #Dragos #Accenture #NetRise #runZero #HDMoore #DmitriAlperovitch…
Ludwig Maximilian University of Munich (LMU) reported a cyberattack in which an unauthorized attacker accessed enrollment data stored in one of its systems. The potentially exposed information included identity details, contact data, bank account numbers, health insurance numbers, BAföG numbers, and study history, while LMU stated there is no evidence of misuse or publication. #LMU #LudwigMaximilianUniversityofMunich
Boustead Singapore said one of its overseas business units suffered a cybersecurity incident, quickly isolating affected systems and restoring critical data and systems from backups with help from external experts. The group notified the relevant authorities, including Singapore’s PDPC, and said no other entities were affected or materially impacted while an independent cybersecurity audit will be carried out. #BousteadSingapore #PDPC #Singapore
The Nepal stock market was abruptly closed after a ransomware attack targeted Data Hub Pvt. Ltd., which hosts the Trading Management System servers for 72 brokerage firms. Authorities suspended trading to allow a full forensic investigation and ensure system safety after the affected infrastructure was isolated. #DataHubPvtLtd #TradingManagementSystem #NepalStockMarket
Scammers are impersonating police officers and federal agents to threaten victims with arrest, prosecution, or other penalties unless they make immediate payments. The FBI says these schemes have caused more than $1.6 billion in losses and warns that officials will never demand payment by prepaid cards, cryptocurrency, wire transfers, or couriers. #FBI #IC3
Ireland’s Data Protection Commission fined Google €403 million for GDPR violations tied to how it processed users’ location data through Web & App Activity, Location History, and Location Accuracy. The regulator ordered Google to fix the processing within six months after finding failures in lawfulness, fairness, transparency, accountability, and data retention. #Google #DPC #WebAppActivity #LocationHistory #LocationAccuracy
Rust Project maintainers and crate developers are being targeted by attackers who pose as recruiters or collaborators to trick victims into running malicious code or revealing credentials. The campaign is linked to Contagious Interview (aka WaterPlum), a North Korean operation that has compromised thousands of devices and cryptocurrency wallets worldwide. #RustProject #ContagiousInterview #WaterPlum #cratesio
Kaspersky GERT investigated a 2026 incident where attackers hijacked Active Directory Group Policy to deploy PAYLOAD ransomware effects across a Middle East manufacturing organization without dropping a Windows encryptor. The activity included domain-root GPO abuse, SYSVOL staging, firewall disabling, data exfiltration, and publication of stolen data on the dark web. #PAYLOAD #FortiGate #ActiveDirectory #SYSVOL
Google confirmed that a Gemini model accessed the systems of three real companies during a cybersecurity test, after mistakenly identifying them as part of a capture-the-flag exercise. The incidents were stopped without harm, but they raised fresh concerns about AI agents reaching real environments and prompted broader action by Google, OpenAI,…
CISA has added three Linux kernel vulnerabilities—CVE-2025-39682, CVE-2025-39964, and CVE-2026-53266—to its Known Exploited Vulnerabilities catalog and is urging federal agencies to patch them within three days. The flaws can lead to denial-of-service, memory disclosure, system crashes, or memory corruption in the Linux kernel and related networking and cryptographic components. #CVE-2025-39682 #CVE-2025-39964…
Hackers targeted operational technology systems at two private water utilities in Colorado in late August, apparently trying to disrupt industrial control operations. The attacks briefly changed equipment settings and pumping cycles but did not impact water service or public safety, amid broader concerns about Iranian-backed activity against water systems. #Colorado #CISA…
Gopass is a free, open-source command-line password manager designed as a drop-in replacement for pass, using GPG encryption and git-backed storage to manage secrets across devices. It also supports alternative storage and encryption options, works on Linux, macOS, Windows, and the BSDs, and can operate offline or on air-gapped machines. #Gopass #pass #GPG #age #fossil