A new wave of ‘vishing’ attacks is breaking into SSO accounts in real time
Cybercrime groups, including one that identifies as ShinyHunters, are targeting single sign-on services to gain access to victim networks and steal data.
Advertisement
OMB rescinds ‘burdensome’ Biden-era secure software memo
Government
CISA publishes a post-quantum shopping list for agencies. Security professionals aren’t sold
CybersecurityFeatured on CyberScoop
-
Some ChatGPT browser extensions are stealing your data
-
Industry, government, nonprofits weigh voluntary rules for commercial hacking tools
-
Watchdog group sues for TSA data sharing agreement with ICE
-
Leader of ransomware crew pleads guilty to four-year crime spree
-
Researchers find Jordan government used Cellebrite phone-cracking tech against activists
Advertisement
Popular Stories
Cyber scholarship-for-service students say government has pulled rug on them, potentially burdening them with debt
Hiring freezes, budget cuts and more are raising questions about the future of CyberCorps.
A house full of open windows: Why telecoms may never purge their networks of Salt Typhoon
Experts tell CyberScoop that the U.S. telecom system is just too technologically fragmented to gather a clear picture of threats, and too big to ever fully eject…
‘Whatever we did was not enough’: How Salt Typhoon slipped through the government’s blind spots
Seven sources tell CyberScoop that a lack of coordination and miscommunication between federal agencies and the telecommunications industry left critical networks exposed to the Chinese hacking group.
Prolific Russian ransomware operator living in California enjoys rare leniency awaiting trial
Ianis Aleksandrovich Antropenko allegedly committed ransomware attacks from 2018 to 2022. He’s been out on bond since his arrest almost a year ago, despite multiple run-ins with…
Advertisement
Insights
Why cyber modernization requires partners with technical plus acquisition expertise
Why identity is the definitive cyber defense for federal agencies
Agencies push for digital transformation amid security challenges
Want to scale cyber defenders? Focus on AI-enabled security and organization-wide training
The Latest
NIST officials detail impact of staff cuts on encryption and other priorities
GCVE launches as a decentralized system for tracking software vulnerabilities
Lawmakers probe CISA leader over staffing decisions
Black Basta’s alleged ringleader identified as authorities raid homes of other members
The thin line between saving a company and funding a crime
HackerOne rolls out industry framework to support ‘good faith’ AI research
Congressional appropriators move to extend information-sharing law, fund CISA
Predator bots are exploiting APIs at scale. Here’s how defenders must respond.
Jordanian national pleads guilty after unknowingly selling FBI agent access to 50 company networks
Federal court dismisses Trump DOJ lawsuit seeking California voter data
Trump’s cyber chief pick tells lawmakers he’ll assess efficacy of Cybercom-NSA dual-hat role, if confirmed
CISA’s secure-software buying tool had a simple XSS vulnerability of its own
The quiet way AI normalizes foreign influence
Upcoming Events
Workday Federal Forum
Waldorf Astoria, Washington, D.C.EMERGE: Modern Government
Waldorf Astoria, Washington, D.C.CYBERWEEK
WASHINGTON D.C.CyberTalks
International Spy Museum, Washington, D.C.Webinar: Cyber Resilience – The Age of Persistent Threats
Virtual
Advertisement
Advertisement