Tag: government
102 articles
ODNI Bolsters Election Security with New Coordination Leaders
The Office of the Director of National Intelligence (ODNI) has appointed two new leaders, Dave Mastro and James Cangialosi, to spearhead efforts to safeguard the 2026 midterm elections from threats. This move bolsters the ODNI's team of experts dedicated to protecting election integrity.
State CISOs Eroding Confidence Amid AI-Driven Threat Surge
State CISOs are losing faith in their ability to protect sensitive data, with confidence plummeting to just 22% - a drastic drop from 48% in 2022 - as AI-driven threats intensify. This sharp decline in confidence extends beyond state governments, with 63% of CISOs also doubting the ability of local governments and public higher education institutions to safeguard public data.
Ramirez Assumes Top House Cybersecurity Post Amid Election Security Push
Rep. Delia Ramirez takes the reins as top Democrat on the House Homeland Security panel's cybersecurity subcommittee, vowing to put election security and Americans' data protection at the forefront. She steps into the role with a clear warning: the current administration's lax approach to cybersecurity won't fly on her watch.
Zero Trust Stalls at Data Movement Bottleneck
The moment data crosses a boundary, it's often assumed to be trustworthy - but that's exactly where attackers strike, exploiting this blind spot with alarming success. A recent Cyber360 survey reveals that 53% of security leaders still rely on manual processes to move sensitive data, leaving a gaping Zero Trust gap that's ripe for exploitation.
Pentagon Bolsters AI Arsenal with Google's Latest Model
The Pentagon has supercharged its AI capabilities with Google's cutting-edge model, Gemini 3.1 Pro, now available on its enterprise generative-AI platform, GenAI.mil, marking a major milestone in American AI innovation. This powerful tool is set to revolutionize defense operations and will also be accessible to federal government users.
Section 702 Surveillance Law Faces Looming Expiration Amid Discord
Congress rewrote Section 702 surveillance law with 56 changes in 2024, but now faces a renewal crisis as the statute nears expiration, with supporters and critics at odds over the very data that should guide its future. With the law set to expire, lawmakers must navigate a bitter debate with no shared factual baseline.
CERT-UA Warns of Data-Theft Malware Campaign Targeting Ukraine's Healthcare and Government
A sinister new malware campaign has set its sights on Ukraine's healthcare and government institutions, putting sensitive information at risk and threatening the very clinics and emergency hospitals people rely on. CERT-UA has sounded the alarm on this data-theft operation, which has already compromised municipal healthcare institutions and government bodies with stealthy malware.
Malware Abuses Signed Software to Disable Antivirus Protections
Thousands of vulnerable endpoints across schools, utilities, governments, and hospitals have fallen prey to a sneaky malware that masquerades as legitimate software, only to disable antivirus protections and wreak havoc with SYSTEM-level privileges. This stealthy attack has left countless organizations defenseless against further threats.
UK to Spend £630K on Digital ID Public Consultation Panel
The UK government is investing £630,000 in a people's panel to gather public feedback on its proposed digital identity scheme, aiming to address concerns and build trust in the new system. But will this hefty price tag buy genuine public engagement or just political cover?
China-Linked Tick Group Exclusive: Critical Lanscope 0-day
Think of it as the patch arriving after someone already walked through the door — a critical CVE‑2025‑61932 (CVSS 9.3) zero‑day in Motex Lanscope has been weaponized in the wild by the China‑linked Tick group. The flaw allows unauthenticated SYSTEM‑level command execution on on‑prem Lanscope servers, so if you run Lanscope, find exposed instances, isolate them from untrusted networks, and apply mitigations or updates immediately.
investment scam: Shocking, Risky Deepfake Google Ads
Scammers are buying top search spots and using AI deepfakes to impersonate Singapore officials, creating convincingly official sites that trick investors into wiring funds. Learn simple checks—verify .gov.sg domains and contact agencies directly—to avoid falling for these high-tech cons.
digital identity Must-Have UK Veterans Trial Boosts Trust
The UK is recruiting Armed Forces veterans to pilot a national digital ID — a practical and symbolic test of whether a secure, user-friendly system can win public trust or instead expose privacy and inclusion pitfalls.
full-lifecycle COTS AI: Stunning, Risk-Reducing Choice
When time, budget and national‑security stakes won’t wait, full‑lifecycle COTS AI lets agencies field proven capabilities fast while offloading sustainment, security and compliance. By cutting delivery time, lowering program risk and offering predictable lifecycle costs, these platforms free teams to focus on mission outcomes instead of reinventing the plumbing.
AI-capable workforce: Stunning Best Practices
At the AIX Summit, technologists, agency leaders and vendors wrestled with the real challenge of scaling AI in government—not just the tools, but the people, policies and protections that make deployments safe and effective. Three practical takeaways emerged—hire hybrid-skilled teams, build layered governance for agentic systems, and make security and workforce resilience non-negotiable—offering an immediate roadmap for moving from pilots to production.
public Wi‑Fi Must-Have Security: Best Practices
Free public Wi‑Fi brings huge civic benefits—but every hotspot is also a potential entry point for attackers, so CISOs must balance easy access with strong defenses. Prioritize segmentation, modern authentication, vendor controls, and clear public onboarding so communities stay connected without exposing municipal systems or citizen data.
AIOps for Government: Must-Have Best-Practice Guide
Government agencies can unlock new value from costly legacy systems by layering AIOps—AI-driven monitoring and predictive maintenance—that boosts resiliency, cuts downtime, and stretches IT dollars without risky rip-and-replace projects. Done right, AIOps becomes a secure, incremental bridge to modernization that protects services, reduces firefighting, and preserves public trust.
WooperStealer and Anondoor: Exclusive Dangerous Threat
A new wave of phishing attacks tied to the Confucius actor is using WooperStealer and Anondoor to harvest credentials and establish long-term access in Pakistani networks, putting government, military, and critical infrastructure at risk. Simple steps like enforcing MFA, patching systems, and running realistic phishing training can sharply reduce exposure—now’s the time to harden defenses.
Cybersecurity Information Sharing Act: Must-Have Fix Needed
With key protections of the Cybersecurity Information Sharing Act expired, companies and government teams now face legal uncertainty that could slow the rapid data-sharing defenders rely on — giving attackers a wider window to strike. Unless lawmakers or industry act quickly to restore clear, privacy-conscious rules, our ability to detect, analyze and stop cyberattacks may fragment just as threats grow more sophisticated.
Phantom Taurus: Exclusive Alert Reveals Risky Telecom Hacks
Meet Phantom Taurus, a newly identified China-aligned cyber-espionage group quietly infiltrating government networks and telecom infrastructure to harvest intelligence and monitor communications. Their stealthy tactics underscore the urgent need for stronger defenses, transparency, and industry cooperation to protect privacy and critical services.
NET malware Dangerous: Exclusive Phantom Taurus Threat
A Beijing-linked group dubbed Phantom Taurus is quietly using custom .NET malware to hunt credentials and siphon sensitive files from government web servers across Asia, Africa and the Middle East — a sharp reminder that everyday frameworks can hide serious threats. Defenders should harden .NET apps, tighten logging and MFA, and share indicators fast to turn the tables before secrets slip away.
Elon Musks X: Stunning, Risky Government Exit Looms
A senior UK minister has warned the government may pull its presence from Elon Musk’s X amid concerns over violence and disinformation, forcing a rethink of how officials communicate and hold platforms to account. With the Online Safety Act in play, ministers must balance public trust against the risk of ceding the conversation to bad actors.
government-backed loan: Exclusive lifeline or risky bailout
A severe cyberattack that halted Jaguar Land Rover’s factories and put thousands of jobs at risk has prompted the UK to underwrite up to £1.5bn to stabilise production and protect supply chains. The emergency loan buys breathing space — but revives tough questions about corporate cyber responsibility and when taxpayers should rescue private industry.
government datacenter Stunning Outage Exposes Risk
When a datacenter fire put 647 e-government services offline, everyday tasks like tax filings and benefit claims suddenly ground to a halt. It’s a wake-up call that Korea’s digital convenience needs stronger backups, clearer communication and user-centered contingency plans to protect people when systems fail.
digital identity Must-Have or Risky UK Rollout
Britain plans to issue government-backed digital IDs to all legal residents and may require them for right-to-work checks by 2029—promising faster hiring and fraud reduction but raising real concerns about privacy, exclusion and security. As the deadline approaches, lawmakers, employers and civil society must nail down safeguards to ensure the system helps people rather than locks them out.