8 casos · pág. 1/1
TrustedSec (author Chris Camejo) explains that FCI and CUI safeguarding obligations do not exist during the pre-contract solicitation phase unless the contractor has agreed to a specific pre-contract agreement. Prime contractors, especially large DoD primes, are increasingly pushing CMMC, FAR 52.204-21 and DFARS 252.204-7012/7021 requirem…
A cybersecurity incident at US government contractor BAE Systems has knocked out the systems behind the Bankruptcy Noticing Center (BNC), which generates and distributes bankruptcy notices for all federal bankruptcy courts in the US. The Administrative Office of the US Courts (AOUSC) confirmed on October 15 that BNC IT systems and website…
The US Department of Defense has confirmed a breach of the Defense Manpower Data Center (DMDC), one of its main personnel data repositories. The breach exposed sensitive data on roughly 2.76 million people plus about 294,000 deceased individuals. Unauthorised users reportedly accessed files between October 2025 and 16 July 2026, and the i…
The Citizen Lab disclosed AdFection, the first technical demonstration of zero-click mercenary spyware delivered through targeted online advertising. The Israeli firm Discover-Tech presents itself as a legitimate ad company but acts as a facilitator for several mercenary spyware partners, including Candiru. Its ads covertly direct million…
A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…
This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…
MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …
TrendAI™ (Trend Micro) published its H1 2026 APT Activity Roundup on July 29, 2026. It finds nation-state actors used AI in more stages of the intrusion lifecycle than in any prior half-year the company has tracked. China-aligned actors used generative AI to refine exploits and iteratively build malware through "vibe coding", and one AI a…
