Tag: government
102 articles
Federal Agencies Shift DevSecOps from Pilots to Operational Capability
The conversation around DevSecOps in federal agencies has officially shifted from "should we?" to "how can we make it work at scale?" Agencies are now focused on turning their DevSecOps pilots into fully-fledged operational capabilities.
US Agencies Embrace DevSecOps with Shift-Left Approach
The US Army's Acting CIO, Gabe Chiulli, is leading the charge to revolutionize software delivery by embracing a shift-left approach to DevSecOps, aiming to merge commercial speed with government security needs. By setting a new framework, Chiulli is paving the way for industry collaboration and rapid innovation.
AI Coding Tools Exacerbate Open-Source Remediation Debt
AI coding tools are speeding up development, but at a hidden cost: they can quickly introduce a flood of new open-source components that security teams struggle to keep up with, multiplying remediation debt. This creates a downstream cycle of vulnerability assessments, licensing checks, and ownership questions that can be overwhelming.
ExfilSquad Breaches 13 Organizations Via Misconfigured Microsoft Power Pages
Meet ExfilSquad, a notorious data-extortion group that's made off with a whopping 27 million records and 382.64 GB of sensitive data from 13 major organizations across government, education, finance, and manufacturing. The stolen treasure trove was dumped online for all to see, courtesy of a simple misconfiguration in Microsoft Power Pages.
Microsoft 365 Phishing Campaign Hijacks Accounts to Gather Payroll, Finance Emails
Beware of a sneaky Microsoft 365 phishing campaign that's hijacking accounts to get its hands on sensitive payroll and finance emails. Hundreds of organizations across healthcare, education, and more have already been targeted in this financially driven attack.
Swiss Government SharePoint Breach Exposes 200 Accounts
The Swiss government's Microsoft SharePoint system was breached, compromising the login credentials of around 200 accounts, after security specialists detected unusual activity on July 28. The breach was quickly contained and remediated, with external internet access to the SharePoint environment blocked and patches applied.
Lawmakers Push to Extend ID Theft Services for OPM Breach Victims
Lawmakers are pushing for a bill that would provide lifetime identity protection for the 4.2 million federal employees and contractors affected by the 2015 Office of Personnel Management breach, giving them the peace of mind they deserve. The proposed RECOVER PII Act aims to make the currently expiring protection program permanent, ensuring victims are safeguarded against ID theft for life.
JadeProx Targets Governments, Healthcare with TriBack Loader
Meet JadeProx, a China-nexus cluster with a sneaky new tool called TriBack Loader that's been targeting governments and healthcare organizations, including a Vietnamese hospital and Malaysia's Ministry of Foreign Affairs. Its operations were uncovered after an exposed Alibaba Cloud server spilled the beans on its multi-target attacks.
House passes 2027 Defense Bill Amid Senate Stalemate
The House has passed the 2027 Defense Bill with a narrow 216-to-212 vote, despite some lawmakers on both sides expressing disagreement with certain provisions. This key step in a long process sets the stage for further negotiations, particularly with the Senate, where a stalemate currently exists.
GoSerpent Malware Targets Southeast Asian Governments for Espionage
A stealthy cyber threat, known as GoSerpent, has been secretly targeting Southeast Asian governments and diplomats since late 2025, with the goal of gathering sensitive intelligence. This sophisticated malware has been evolving, with a new set of malicious tools deployed as recently as May 2026.
Private 5G Networks Expose Government to Hidden Security Risks
Government agencies and military organizations risk exposing themselves to hidden security threats if they don't adopt a zero-trust approach to their private 5G networks, leaving them vulnerable to potentially devastating attacks. Without proper security measures in place, adversaries could gain unrestricted access to sensitive information and wreak havoc.
PhantomEnigma Campaign Exploits Hijacked Government Sites
The PhantomEnigma campaign has hijacked over 20 Brazilian government websites, turning them into malware delivery channels in a sophisticated multi-stage operation. This sneaky attack exploited trusted infrastructure to fly under the radar, using legitimate links and email accounts to spread malware.
CISA Bolsters Protections After Major Credential Leak
CISA swiftly sprang into action after discovering a major credential leak on May 15, taking swift and decisive steps to halt the breach and prevent further damage. By sharing their incident response experience, CISA aims to help other organizations bolster their defenses and avoid similar security mishaps.
Solution Architects Bridge Mission, Technology Gaps in Government
Solution architects play a vital role in bridging the gap between mission objectives and technology, ensuring that complex services are intuitive and accessible for citizens. By prioritizing user experience and mission goals, they turn policy and operations into real-world solutions that make a tangible impact.
Vantor Expands Global Reach with Spatial Intelligence Deals
Vantor is revolutionizing its approach, shifting from traditional satellite imagery to cutting-edge spatial intelligence solutions that cater to a diverse customer base, including national security and non-defense government agencies. This strategic overhaul has enabled the company to tap into the growing global demand for advanced spatial intelligence.
Federal Agencies Modernize Security with Zero Trust Architecture
Federal agencies are revolutionizing their security approach with Zero Trust Architecture, shifting from mere compliance to a robust operational framework that enables seamless mobility, cloud modernization, and AI-driven decision making. By embracing this cutting-edge strategy, leaders are transforming their organizations to stay ahead of emerging threats.
Governments Struggle to Secure Open-Source Software
The alarming reality is that years of underinvestment in open-source software security are catching up with us, with a new supply chain compromise emerging almost every week. A recent scan by Project Glasswing found over 6,000 high-risk vulnerabilities in popular open-source projects, but only a tiny fraction have been patched.
Federal Agencies Pivot to Human-Centered Modernization
To modernize effectively, federal agencies must put people first, prioritizing clear communication and collaboration to drive worker buy-in and prepare employees for success in new environments and roles. By doing so, they can reduce resistance to change and set themselves up for a smoother transition.
Fortinet and Ivanti Exploits Fuel LATAM Infrastructure Attacks
In a shocking revelation, a coordinated campaign dubbed Operation Escaneo has been exposed, targeting critical infrastructure across Mexico, Ecuador, and Portugal, with a staggering 3,708 sessions recorded over just 13 days. The attackers exploited vulnerabilities in Fortinet and Ivanti perimeter appliances to gain entry into government, tax authorities, utilities, transport, telecoms, and banks.
Earth Lusca Expands Arsenal with Windows SprySOCKS Malware
Chinese threat actor Earth Lusca has upgraded its malware arsenal with Windows SprySOCKS, a sneaky tool that lets hackers secretly send commands to compromised devices, allowing them to fly under the radar. This latest move has been linked to a string of high-profile attacks on government organizations worldwide.
French Govt Breach Exposes 73,000 Employees' Data
A major data breach at France's digital affairs directorate, DINUM, has exposed the sensitive information of 73,000 public-sector employees, affecting nearly 9% of the Tchap instant messaging platform's users. The breach compromised public chat rooms, user metadata, and shared files, but thankfully, private conversations remained encrypted and secure.
Mullin Targets 2,800 Staff for Optimal CISA Operations
Department of Homeland Security Secretary Markwayne Mullin aims to boost the Cybersecurity and Infrastructure Security Agency's effectiveness with a targeted workforce of 2,800 personnel, leveraging public partnerships and strategic grant usage to fortify national security.
Webworm APT Expands European Reach with Evolved Tactics
Meet Webworm, a China-aligned APT group that's now setting its sights on European governments and beyond, with a semi-opportunistic approach that's taken its targets to Belgium, Italy, Poland, Serbia, Spain, and even South Africa. This threat actor's evolved tactics signal a concerning expansion of its reach.
AI Models Force Government to Rethink Cybersecurity Risks
The government's approach to cybersecurity is at a critical reflection point, thanks to advanced AI models like Anthropic's Mythos, which present both risks and opportunities for agencies handling sensitive information. Collaboration between the government and vendors is crucial to navigate this new landscape.