Cyber

FBI disables China-linked hacking tools used against US agencies

A hacking group used the tools to target networks belonging to NASA, the Federal Reserve, the National Institutes of Health, the U.S. Senate and the departments of Energy, Justice and Health and Human Services.

Treasury sanctions Iranian hackers tied to critical-infrastructure breaches

Four of the five people named in the cyber action were also charged last week in the Justice Department’s expanded Mabna Institute case.

DOJ charges 17 Iranians in cybertheft campaign

Prosecutors say the Mabna Institute stole 31.5 terabytes of academic data and breached email accounts at U.S. agencies and companies.

CMMC Works. Now let’s sharpen it.

This is not the moment to loosen the standard, writes a former DOD CIO.

As warfare becomes engineering, the era of the digital mercenary dawns

The White House revives “privateering for the digital age” by authorizing cyber firms to strike foreign targets.

Local water utilities are under cyber attack. A new group wants to help

The National Rural Water Association and DEF CON Franklin are coordinating the development of a replicable cybersecurity package for water providers.

Chinese telecoms kept footholds in US despite crackdowns, probe finds

Three state-owned firms retained equipment, data center space, and network ties, including one network that appeared in routes to Salt Typhoon servers.

Exclusive

OPM breach victims could get identity protection for life

The federal government’s coverage for 22.1 million people hoovered up in the 2015 China-linked breaches is scheduled to end Sept. 30.

Amazon uncovers broad North Korean hacking campaign against open-source software

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known.

AI can now power every stage of a cyberattack

Researchers determined AI has been used to identify security flaws, generate commands, and carry out parts of intrusions.

Pentagon halts Phase 2 of cybersecurity certification program, launches 60-day ‘reform’ review

The Defense Department will keep cybersecurity self-assessments, but will not require third-party certifications as planned.

Exclusive

DHS network intrusion was twice ruled a false positive before breach confirmed

Suspicious activity on the Homeland Security Information Network, which is being used to support World Cup games around the U.S., was first detected around mid-to-late May.

House committee wants details on DHS network hack

Cyber intruders accessed the unclassified network being used to help support World Cup games around the U.S., a senator said last week.

Pentagon's quantum strategy ‘a first step’ in preparing for the future, CIO says

Released on Tuesday along with two executive orders, the document sets deadlines for post-quantum cryptography adoption.

Parts of NSA lose Mythos 5 access after White House imposes limits

The Five Eyes alliance is warning that frontier AI could accelerate cyberattacks and cyber defense.

Peace deal unlikely to stem Iran's hackers, US officials say

Cyber operations are “definitely part of warfare that keeps going,” one said.

Anthropic suspends top AI models after US export-control order

U.S. officials ordered the company to limit foreign access to Fable 5 and Mythos 5.