Plankey had been waiting for more than a year, prompting the request to withdraw him as the one tapped to lead an agency now in further upheaval.
The post CISA director pick Sean Plankey withdraws his nomination appeared first on CyberScoop.
Experts say the federal legislation takes inspiration from states laws in Virginia and Kentucky, but a lack of bipartisan support could spell trouble.
The post House Republicans roll out national privacy bill appeared first on CyberScoop.
Chatrie v. United States asks whether a single warrant can justify a location-data dragnet — and what “probable cause” means when the search starts with basically everyone nearby.
The post The Supreme Court is about to decide how far geofence warrants can go appeared first on CyberScoop.
When attackers can discover and exploit vulnerabilities in minutes, last quarter's audit doesn't mean much. CISOs need to shift from static measurement to real-time awareness -- and fast.
The post The AI era demands a different kind of CISO appeared first on CyberScoop.
Angelo Martino helped accomplices extort a combined $75.3 million in ransom payments from five victim companies.
The post Former DigitalMint ransomware negotiator pleads guilty to extortion scheme appeared first on CyberScoop.
Tyler Robert Buchanan “was the glue that held this gang together,” a cybercrime researcher said. He faces up to 22 years in federal prison.
The post Scottish man pleads guilty to attack spree that created Scattered Spider’s notoriety appeared first on CyberScoop.
The ideas came up at a House Homeland Security Committee hearing, as health care ransomware attacks are on the rise.
The post Lawmakers ponder terrorism designations, homicide charges over hospital ransomware attacks appeared first on CyberScoop.
Anthropic’s new model can find vulnerabilities faster and cheaper than ever. The hardest part is still everything that comes after.
The post Mythos can find the vulnerability. It can’t tell you what to do about it. appeared first on CyberScoop.
Google’s highest security setting for its agents runs command operations through a sandbox and throttles network access, but is still vulnerable to prompt injection.
The post Vuln in Google’s Antigravity AI agent manager could escape sandbox, give attackers remote code execution appeared first on CyberScoop.
The commission is preparing to enforce key parts of a new law against sexual deepfakes and searching for ways to block AI-driven scamming using voice clones.
The post The FTC’s AI portfolio is about to get bigger appeared first on CyberScoop.
The attack, which originated at Context.ai, showcases the pitfalls of interconnected cloud applications and SaaS integrations with overly privileged permissions.
The post Vercel’s security breach started with malware disguised as Roblox cheats appeared first on CyberScoop.
Two weeks ago, a suspected North Korean threat actor slipped malicious code into a package within Axios, a widely used JavaScript library. The immediate concern was the blast radius: roughly 100 million weekly downloads spanning enterprises, startups, and government systems. But beyond the sheer scale, the attack’s speed was just as worrisome – a stark […]
The post Why the Axios attack proves AI is mandatory for supply chain security appeared first on CyberScoop.
GreyNoise researchers spotted a consistent trend in forthcoming vulnerabilities affecting security tools, providing defenders an early-warning system for likely imminent attacks.
The post Network ‘background noise’ may predict the next big edge-device vulnerability appeared first on CyberScoop.
Congress overhauled Section 702 in 2024 with 56 changes. Now, as the law nears expiration, supporters and critics can’t even agree on what the numbers show.
The post The surveillance law Congress can’t quit — and can’t explain appeared first on CyberScoop.
Kejia Wang and Zhenxing Wang established shell companies and hosted laptop farms to help operatives obtain jobs at more than 100 U.S. companies.
The post US nationals sentenced for aiding North Korea’s tech worker scheme appeared first on CyberScoop.
Operation PowerOFF’s latest globally coordinated action identified more than 75,000 alleged cybercriminals. Officials warned each of them to stop jamming up traffic.
The post Officials seize 53 DDoS-for-hire domains in ongoing crackdown appeared first on CyberScoop.
Three incidents. No actual breaches. Full-scale crisis response. AI hallucinations are creating a new threat vector that most organizations have yet to prepare for.
The post Ghost breaches: How AI-mediated narratives have become a new threat vector appeared first on CyberScoop.
The National Vulnerability Database will now only analyze vulnerabilities in critical software, systems used in the federal government and those under active exploitation.
The post NIST narrows scope of CVE analysis to keep up with rising tide of vulnerabilities appeared first on CyberScoop.
National Cyber Director Sean Cairncross said execution of the strategy is “rolling forward actively.”
The post Executive orders likely ahead in next steps for national cyber strategy appeared first on CyberScoop.
A new cybersecurity-focused variant of ChatGPT and an expanded access program put OpenAI in direct competition with Anthropic's Project Glasswing — and raises fresh questions about who gets to wield the most powerful security AI.
The post OpenAI expands Trusted Access for Cyber program with new GPT 5.4 Cyber model appeared first on CyberScoop.
