Cybersecurity
General cybersecurity news and analysis
Mobile Security: Stunning Must-Have Best Defenses
Our phones hold more than photos—they can unlock secrets and national risks. Simple, practical protections like built-in encryption, hardware-backed MFA, device management, and hands-on training can stop attacks before they spread.
Iris Recognition: Must-Have Best Practices for Privacy
At the Iris Experts Group Annual Meeting, technologists, policymakers, and privacy advocates came together to chart a path for making iris recognition more accurate, fair, and secure—without sacrificing civil liberties. The result: concrete steps on better algorithms, interoperable standards, independent audits, and privacy-by-design practices to build trust as this powerful technology goes mainstream.
5G cybersecurity Must-Have: Best Protection Guide
As 5G spreads, new cyber risks multiply—NCCoE’s latest white paper lays out practical, must-have principles to design secure 5G networks from the ground up. Whether you’re a tech leader or policymaker, this guide helps you balance innovation and safety to protect devices, data, and critical infrastructure.
Zero Trust Must-Have: Stunning Best NIST Blueprint
Ready to stop breaches before they start? NIST’s 19-step Zero Trust blueprint turns “never trust, always verify” into a practical roadmap—focusing on identity, micro‑segmentation, and continuous monitoring to cut risk, accelerate detection, and protect your most critical assets.
Patch Tuesday Exclusive: Critical June 2025 Alert
June’s Patch Tuesday fixed 67 vulnerabilities—one already being actively exploited and another with public proof‑of‑concept—so don’t wait to patch. Prioritize internet‑facing and actively exploited systems now to reduce your risk of breach, downtime, and costly fallout.
Proxy Services: Stunning, Risky Threat to Ukraine
As daylight fades over Kyiv, a quieter crisis unfolds online: huge swaths of Ukrainian IP space have been transferred to proxy services and intermediaries. That shift lets privacy tools and malicious actors alike masquerade as local, undermining trust, security, and everyday life for millions.
Small Business Cybersecurity: Must-Have Essential Defenses
A single cyberattack can sink a small business—NCCoE’s Cybersecurity Connections turns NIST guidance into practical, budget-friendly steps (MFA, patching, tested backups) and real-world tools to help owners protect customers, preserve trust, and keep their business running.
IoT Must-Have: Best Secure Provisioning Guide
Don’t let insecure device setup turn your smart home into someone else’s playground — this practical guide walks you through NIST-backed provisioning tips like hardware roots of trust, authenticated onboarding, unique credentials, and secure OTA updates to keep devices safe from day one. Follow these doable steps and simple UX fixes to make secure setup the easy, default choice for manufacturers and users alike.
NIST Privacy Framework: Must-Have Guide to Best Practices
Get a practical, easy-to-adopt roadmap with the updated NIST Privacy Framework — it turns privacy principles into clear, actionable steps that align with cybersecurity to reduce risk and build user trust. Whether you’re a startup or an enterprise, the refreshed guidance helps you embed privacy-by-design, measure results, and map controls to compliance for stronger, sustainable data stewardship.
Open Industrial Digital Ecosystem Summit: Must-Have Wins
Join the Open Industrial Digital Ecosystem Summit to turn interoperability, shared semantics, and practical governance into real-world wins—speeding innovation, cutting costs, and protecting privacy across industries.
Quantum Code Breaking Falls Short Compared to Simple Tools
Think quantum computers will break all encryption tomorrow? Peter Gutmann says the real threat is far more down-to-earth—and it’s coming from simple, proven tools hackers use every day.
Critical Security Vulnerabilities Found in ICEBlock Platform
Is your privacy truly safe with ICEBlock? Discover the hidden security flaws in this app designed to protect anonymity but may leave users exposed in unexpected ways.
Microsoft Extends Security Updates 6 Months for Vintage Exchange and Skype Servers
Microsoft is giving organizations a crucial six-month breather with extended security updates for Exchange Server and Skype for Business, recognizing the tough road many face when moving away from legacy systems.
Operation Eastwood Shuts Down 100+ Servers Behind Ukraine DDoS Attacks
International law enforcement just dealt a major blow to cyberattacks against Ukraine, shutting down over 100 servers tied to a notorious pro-Russian hacking group in a bold, coordinated strike.
Reducing Cybersecurity Risks of Portable Storage in OT Systems
Discover how simple USB drives could threaten your critical OT systems—and explore NIST’s expert-backed strategies to keep your industrial operations safe without slowing down essential work.
NIST Releases 5G Cybersecurity White Paper on Network Design Principles
In the race to deploy fifth-generation wireless networks, security concerns often lag behind the roar of technological progress. “The promise of 5G is transformative, but so too are its risks,”…
IoT Open House: Implementing SP 1800-36 and Future Outlook
Discover how the groundbreaking SP 1800-36 standard is transforming IoT security by ensuring trusted credential provisioning, protecting everything from your smart home to critical infrastructure against remote threats.
NIST Updates Privacy Framework Linked to Latest Cybersecurity Guidelines
Stay ahead of evolving cyber threats with the latest NIST Privacy Framework update—designed to make managing privacy risks easier, smarter, and more aligned with today’s cybersecurity realities.
75% of Building Systems Impacted by Exploited Vulnerabilities
Did you know that 75% of building management systems are already compromised by cyberattacks? As our buildings get smarter, securing these vital systems has never been more crucial to protect our safety and daily lives.
Pro-Russian Cybercrime Network Dismantled in Operation Eastwood
Europol’s Operation Eastwood just struck a major blow against a notorious pro-Russian cybercrime network, showcasing how global teamwork is turning the tide in the high-stakes world of digital warfare.
Criminals Exploit Patched SonicWall VPNs to Deploy Stealthy Backdoors
Think your patched SonicWall VPN is safe? Think again—cybercriminals are slipping in stealthy backdoors on outdated devices, proving that even the latest updates can’t stop all threats.
UNC6148 Backdoor Found in Patched SonicWall SMA 100 Devices
Think your patched SonicWall SMA 100 devices are safe? Think again—despite updates, a sneaky backdoor from the UNC6148 hacking group is still putting your network at risk.
UNC6148 Backdoors Patched in SonicWall SMA 100 Series Devices
Think your patched SonicWall SMA 100 device is safe? Think again—cybercriminals are exploiting its outdated status to sneak in persistent backdoors, proving that end-of-life gear can be your network’s biggest weak spot.
Embedding Security in Digital Citizen Services for Resilient Government
When digital services stumble, everyday life grinds to a halt—discover why embedding robust security in government platforms is vital to keeping our communities safe, connected, and resilient.