Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract

The phone-cracking firm broke off from its deal with Russia, but Citizen Lab said that didn’t stop authorities from surveilling Andrey Pivovarov.

The post Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract appeared first on CyberScoop.

Continue reading Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract

Malicious hackers exploit Cisco zero-day for highest access level at communications service provider

Mandiant detailed the incident in a blog post Wednesday, but it’s unclear who was behind it or if they managed to get broad visibility into the victim’s internal traffic.

The post Malicious hackers exploit Cisco zero-day for highest access level at communications service provider appeared first on CyberScoop.

Continue reading Malicious hackers exploit Cisco zero-day for highest access level at communications service provider

In a first, a court takedown goes after two cybercrime tools at once

Microsoft, with law enforcement and industry partners, disrupted more than 200 command and control servers for Amadey and StealC, often used in conjunction.

The post In a first, a court takedown goes after two cybercrime tools at once appeared first on CyberScoop.

Continue reading In a first, a court takedown goes after two cybercrime tools at once

Open-source security is posing challenges governments can’t easily solve

A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure into a shifting threat.

The post Open-source security is posing challenges governments can’t easily solve appeared first on CyberScoop.

Continue reading Open-source security is posing challenges governments can’t easily solve

Justice Department seizes infrastructure used by cyber scam and criminal marketplace

lso Tuesday, the Treasury Department took action against the same Cambodian company, Huione Group, and affiliates.

The post Justice Department seizes infrastructure used by cyber scam and criminal marketplace appeared first on CyberScoop.

Continue reading Justice Department seizes infrastructure used by cyber scam and criminal marketplace

Lawmakers leary about Trump administration’s Anthropic order

Some panned it, some said they needed more information, but caution figured into all of the responses.

The post Lawmakers leary about Trump administration’s Anthropic order appeared first on CyberScoop.

Continue reading Lawmakers leary about Trump administration’s Anthropic order

A case for how to shape ‘ingredient lists’ for AI models

AI bills of materials (AIBOMs), modeled on standards that worked for software, could transform how policymakers understand and regulate AI. A new roadmap outlines what they need to include and how to get there.

The post A case for how to shape ‘ingredient lists’ for AI models appeared first on CyberScoop.

Continue reading A case for how to shape ‘ingredient lists’ for AI models

CISA directive orders agencies to prioritize vulnerability patching in a new way

A vulnerability that meets all four criteria would need to be fixed within three days, for instance.

The post CISA directive orders agencies to prioritize vulnerability patching in a new way appeared first on CyberScoop.

Continue reading CISA directive orders agencies to prioritize vulnerability patching in a new way

CISA is rethinking how it prioritizes risks and vulnerabilities for feds, private sector

Acting director Nick Andersen said a binding operational directive is en route for agencies, and that more specific discussions need to happen with critical infrastructure owners.

The post CISA is rethinking how it prioritizes risks and vulnerabilities for feds, private sector appeared first on CyberScoop.

Continue reading CISA is rethinking how it prioritizes risks and vulnerabilities for feds, private sector

Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint

The company said it spotted a spearphishing campaign linked to the Israeli spyware maker targeting WhatsApp users, despite a court order prohibiting it.

The post Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint appeared first on CyberScoop.

Continue reading Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint