The Department of Homeland Security is barring civilian federal agencies from buying or using IT products and services from Hangzhou DeepSeek Artificial Intelligence and its affiliates. The notice, due in the Federal Register, cites the Federal Acquisition Supply Chain Act and a review by the Federal Acquisition Security Council. An accom…
The Department of Justice announced 28 arrests across California on Monday under Operation Protect the Vote. The defendants are foreign nationals and permanent green card holders charged with fraudulently registering to vote and making false statements in naturalization applications. Officials say all 28 appear on a list of more than 20,0…
Sen. Ron Wyden sent a letter to CISA and the Office of Management and Budget (OMB) urging federal adoption of Encrypted Client Hello (ECH). ECH hides the name of the website a user visits from anyone monitoring network traffic. His office identified at least 350 federal sites that do not use ECH. Wyden warned that hackers and foreign adve…
A cybersecurity incident at defense contractor BAE Systems has stopped the production and delivery of bankruptcy notices for every US federal bankruptcy court. BAE operates the Bankruptcy Noticing Center (BNC) systems and websites on behalf of the federal judiciary. The Administrative Office of the U.S. Courts confirmed the incident on Oc…
VisionHeight, an Israeli threat intelligence firm, uncovered a network of hyperlocal websites spanning at least 14 US states, built to influence how AI chatbots answer questions about local and state races. Sites with names like "Wolverine State Report", "Peach State Bulletin" and "Tarheel State Report" repeat hundreds of near-identical s…
Robert Wayne Boling Jr., a 45-year-old US citizen living in Angeles City, Philippines, pleaded guilty to conspiracy to commit wire fraud and money laundering, the US Department of Justice announced. Prosecutors call him the principal orchestrator of a scheme that used stolen PII to compromise bank accounts of thousands of US servicemember…
A 40-year-old Nigerian national, Chukwuemeka Victor Amachukwu, was sentenced to eight years in prison by a US federal court for a 2019-2023 scheme that combined hacking of US tax preparation businesses, filing of fraudulent tax returns and fake investment fraud. He used identities stolen from victim organizations to file false returns wit…
The Citizen Lab disclosed AdFection, the first technical demonstration of zero-click mercenary spyware delivered through targeted online advertising. The Israeli firm Discover-Tech presents itself as a legitimate ad company but acts as a facilitator for several mercenary spyware partners, including Candiru. Its ads covertly direct million…
Symantec reports that APT28 (also tracked as Swallowtail, Fancy Bear and Forest Blizzard), a group linked to Russia's GRU, compromised two defense firms and a law enforcement agency in NATO countries in recent months. The victims were a naval shipbuilder, a manufacturer of military aircraft engines and the agency. At the shipbuilder, oper…
Researchers from the SHARE Foundation and The Citizen Lab report spyware on devices belonging to Vladan Ðokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, and Rade Bajić, a lawyer with the Public Prosecutor's Office for Organized Crime. Citizen Lab confirmed with high co…
Mandiant and GTIG attribute exploitation of the critical BeyondTrust Remote Support zero-day CVE-2026-102764 to Armory Castle (formerly tracked as UNC5221), a likely Chinese government-backed espionage group. BeyondTrust dates the first known exploitation to Aug. 29 and says it detected and contained the activity Sept. 28. Only a small nu…