CyberScoop
112 briefings written from CyberScoop's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Uncertainty Over Who Will Lead CISA as Acting Director's Time Limit Nears
- Federal Judge Dismisses Justice Department Bid to Block Alaska Senate Candidate Over Name Confusion
- AI-Driven Hacking Tool Lets State-Backed Group Breach Around 140 Targets in 11 Days
- Apple Warns Users in 99 Countries That They May Be Targets of Mercenary Spyware
- California Election Offices Receive Federal Grand Jury Subpoenas Ahead of Final Voting Day
- US Defence Contractor Admits Lending His Identity to North Korean Remote Worker Scheme
- Syrian Hacker Who Targeted Media and Governments for Assad Regime Jailed for 42 Months
- Leaked DHS Employee Archive Resurfaces Online After Takedown Attempt
- US Authorities Seize Domain of Virtualine, a Hosting Service Used by Ransomware and Sextortion Gangs
- Hacktivists Leak Data on More Than 41,000 US Homeland Security Staff and Contractors
- Defamation Case Over 2020 Election Film Fails on 'Actual Malice' Standard
- Volt Typhoon's Disappearing Network: How a State-Backed Group Hides Behind Everyday Routers
- Six Charged Over Dating Scam That Drained Crypto Wallets of Around 800 Victims
- OpenAI Admits AI-Generated Bug Reports Are Swamping Open-Source Maintainers
- Anthropic's IPO Filing Warns AI Could Reshape Cybersecurity, and Fuel Cyberattacks
- Ransomware Affiliate Behind Hive and Nefilim Attacks Gets 70 Months in Prison
- US Launches Cyber Pilot to Protect Rural Hospitals as Healthcare Breaches Hit Record High
- Warlock Ransomware Gang Switches Off Security Tools First, Then Strikes
- Brotli Flaw Prompts Emergency Patches, but Experts Urge Calm as No Attacks Are Seen
- Senators and rights groups say US government is overdue on releasing surveillance court opinion
- Alleged Cambodia-Linked Crypto Scam Launderer Extradited to US Over $37M Fraud
- CISA Sets Out a Four-Year Plan to Defend, Harden and Recover from Cyber Attacks
- Targeted Ads Used to Deliver Spyware: US Senators Call for Reform as Ad Industry Pushes Back
- US Bill Targets 'Distillation Attacks' That Copy Leading AI Models
- Certificate Authority eMudhra Exits SSL/TLS Business After Researchers Crack Its Weak Keys in Under a Second
- Encryption Alone Cannot Protect Your Data Once It Starts Moving
- Microsoft Links ConnectWise Cloud Backup Attack to China-Aligned Group Using AI Agents
- PHP Ships Emergency Patches for Two Critical 'php2shell' Flaws as Early Attacks Emerge
- US Man Pleads Guilty to Running Identity Theft Scheme That Targeted Thousands of Servicemembers and Veterans
- Eight-Year Sentence for Hacker Who Targeted Tax Preparation Firms and Stole Client Identities
- Russian Military-Linked Hackers Target Defence Firms and Law Enforcement in NATO Countries
- ConnectWise Cloud Backup Outage Follows Stolen Credential Attack on Microsoft 365 Customers
- US Justice Department Announces 28 California Arrests in Voter Registration Crackdown
- US Senator Presses Federal Agencies to Hide Which Websites Visitors Use, Citing Risks to Whistleblowers and Crisis Callers
- US Homeland Security Bans DeepSeek AI From Civilian Federal Agencies Over Data Concerns
- Pegasus Spyware Found on Devices of Prominent Serbian Critics, Researchers Say
- US Agencies Urge Tighter Controls on AI Testing After Models Reportedly Escape Sandboxes
- Proofpoint Agrees to Buy Varonis in $6.3 Billion Deal Built Around Data Security and AI
- Fake Local News Sites Are Being Built to Fool AI Chatbots, Not Voters
- AdFection: Online Ads Used to Deliver Zero-Click Spyware, Researchers Reveal
- North Macedonia Charges Alleged Admin of OLVX Marketplace That Sold Stolen Data and Credentials
- US Senators Urge Stronger Federal Action on AI Safety After Reports of Models Escaping Sandboxes
- Microsoft and Partners Take Down Chinese-Language Phishing Kit Network Behind Over 1 Billion Scam Messages
- Ivanti Connect Secure Zero-Day Exploited After Fix Was Scheduled for a Routine Update
- FTC Alleges 'Sextortion Help' Firms Took $60 Million From Victims and Failed to Deliver
- Joint Disruption Week: Global Crackdown on West African Scam Networks Leads to 28 Arrests
- Surveillance Vendor Flock Can Now Issue Its Own CVEs, but Will Researchers Trust It?
- Quantum Firm IonQ Buys Zero-Trust Security Company Elisity in Deal Worth Up to US$1.3 Billion
- AI Agent Incidents Keep Pointing to the Same Weak Spot: The Software Supply Chain
- Ransomware Negotiator Arrested in US Extortion Case Linked to FBI Breach
- Leader of Child Sextortion Network 764 Pleads Guilty in US Federal Court
- Anthropic Launches Program to Help Secure Critical Infrastructure and Open Source Software
- US Seizes Domains Behind Two Chinese-Linked Hacking Tools Used Against Critical Infrastructure
- OpenAI Shuts Down Russian and Iranian Influence Operations That Used Fake AI Journalists and Think Tanks
- Quantum Computing Could Break Today's Encryption, and Preparations Are Speeding Up
- US Federal Contractor Data Rules Near Finalisation, With a 72-Hour Breach Reporting Deadline
- FBI and French Police Shut Down Websites Selling Stolen and AI-Generated Child Abuse Material
- FortiBleed Still Active: Attackers Are Locking Owners Out of Fortinet Firewalls and Handing Access to Ransomware Gangs
- California Ends Right to Sue Over Website Tracking Tools, Splitting Business and Privacy Advocates
- Ex-NSA Chief Says Agency Overhaul Is Needed as AI Shrinks Defenders' Response Time
- Experts Urge CISA to Set Clear Rules for Protecting Operational Technology in Federal Agencies
- US Water Systems Remain Exposed as Iranian Attacks and AI-Driven Threats Grow
- AI Agents Are Hacking Systems on Their Own, But Who's Liable?
- Teen-Led Extortion Gang KillSec Dismantled in Global Police Operation
- US Cyber Director: Government-Industry Teamwork Key to Managing AI Risks
- OpenAI Uncovers Novel Trick Used to Steal AI Model Secrets
- Water Utilities Face Rising Cyberattacks as Old Equipment Remains Exposed
- Citrix NetScaler Zero-Day Attacks Went Undetected for Weeks, Dozens of Organisations Hit
- Russian State Hackers Widen Net with New Malware and Mass Phishing Tactics
- US Pushes AI Adoption in Critical Infrastructure, Warns Businesses to Track AI Access
- Alleged Leader of ShinyHunters Extortion Group Arrested in Netherlands
- Kiteworks Restores Service After Precautionary Shutdown Uncovers Critical Flaw
- NVIDIA Launches Open Source Security Platform to Rein In AI Agents
- ShinyHunters Claims FBI Data Breach, Raising Safety and Security Concerns
- Former US Army Soldier Sentenced Over AT&T and Snowflake Extortion Spree
- US Supreme Court Allows States to Use Federal Database for Voter Citizenship Checks
- Lawmakers Push to Classify Biotech as Critical Infrastructure After Cyberattacks
- New US Bill Seeks Independent Watchdog for AI-Driven Cyberattacks
- DOJ Charges Phone-Hacking Firm Leaders Over Hidden Russian Ownership
- US Senators Push New Bill to Strengthen Telecom Security After Salt Typhoon Hack
- Underfunded Water Systems Are an Open Door for Cyber Attackers
- CISA Unveils Plan to Improve Quality of Global Vulnerability Database
- Watchdog: Most US Federal Agencies Missed Deadline for Cloud Security Rules
- Pentagon's Cyber Chief Warns Military Demand for Cyber Tools Outstrips Supply
- Ryuk Ransomware Operator Sentenced to Two Years in US Prison
- OpenAI Partners with Ukraine to Shield Power Grids and Water Systems Using AI
- AI Systems Are Acting on Their Own: What This Means for Australian Small Businesses
- ShinyHunters Claims Breach of FBI Jobs Site, Alleges Theft of Agent Data
- New Bill Would Give Critical Infrastructure Operators Free Access to AI Cyber Defence Tools
- Another China-Linked Hacking Group Caught Exploiting Chrome and Windows Zero-Days
- Trump Reaffirms Light-Touch AI Regulation Despite Security Concerns
- Microsoft Dismantles 'EvilTokens' AI-Powered Fraud Platform Linked to 12,000 Hacked Inboxes
- Nearly 1 in 5 US Water Utilities Have Exposed Logins from Infostealer Malware
- Democrats Push for Review of CISA's Workforce After Major Staff Losses
- Another Scattered Spider Member Pleads Guilty to Multi-Million Dollar Cybercrime Spree
- AI-Discovered Flaw in Common Image Decoders Could Expose Business Data
- Fake Job Offers, Real Theft: North Korean Hackers Target IT Job Seekers Worldwide
- Cisco Warns of Second Actively Exploited Zero-Day in Two Days
- AI-Powered Hacking Is a Real Risk, Not a Doomsday Certainty, Experts Say
- Authorities Take Down Long-Running DDoS-for-Hire Service NightmareStresser
- Iranian Cyber Threats to Small Businesses Could Rise as Conflict Drags On
- CISA's New Advice: Fight Hackers by Feeding Them Fake Data
- US Agencies Board Foreign Tankers to Investigate Suspected Cyberattacks
- Treasury Secretary Rejects Liability Waivers for AI Companies
- CISA Aims to Speed Up Its Cybersecurity Support Program for Federal Agencies
- Cisco Email Gateways Under Active Attack: Patch Now
- Supreme Court Blocks Changes to USPS Mail-In Ballot Handling Ahead of 2026 Midterms
- Five Alleged Black Axe Leaders Extradited to US Over Romance and Advance Fee Scams
- AI Agents Linked to Mass Upload of Malicious Packages on RubyGems
- New US Rule Lets Airlines Skip Compensation for Cyberattack-Related Delays
- Critical GitLab Flaw Under Active Attack: Patch Now
- Conti Ransomware Member Sentenced to Four Years in US Prison