Cybersecurity Dive

DARPA touts value of AI-powered vulnerability detection as it announces competition winners The U.S. military research agency hopes to foster a new ecosystem of autonomous vulnerability remediation.

DARPA touts value of AI-powered vulnerability detection as it announces competition winners: www.cybersecuritydive.com/news/darpa-a... (by @ericjgeller.com)

Financially motivated cluster a key player in ToolShell exploitation Researchers from Palo Alto Networks detail ransomware deployment and malicious backdoors in a campaign against Microsoft SharePoint users.

Financially motivated cluster a key player in ToolShell exploitation: www.cybersecuritydive.com/news/financi... (by David Jones)

CISA officials say agency is moving ahead despite workforce purge Two senior officials defended the agency’s progress amid concerns about the effects of mass layoffs and budget cuts.

CISA officials say agency is moving ahead despite workforce purge: www.cybersecuritydive.com/news/cisa-cr... (by @ericjgeller.com)

NSA partnering with cyber firms to support under-resourced defense contractors Cybersecurity News

NSA partnering with cyber firms to support under-resourced defense contractors: www.cybersecuritydive.com/news/nsa-def... (by @ericjgeller.com)

SonicWall says recent attack wave involved previously disclosed flaw, not zero-day The company said it had linked recent hacks to customers’ use of legacy credentials when migrating from Gen 6 to Gen 7 firewalls.

SonicWall says recent attack wave involved previously disclosed flaw, not zero-day: www.cybersecuritydive.com/news/sonicwa... (by David Jones)

CISA, Microsoft warn about new Microsoft Exchange server vulnerability The flaw could enable a hacker to perform a “total domain compromise” on affected systems, CISA said.

CISA, Microsoft warn about new Microsoft Exchange server vulnerability: www.cybersecuritydive.com/news/cisa-mi... (by David Jones)

US still prioritizing zero-trust migration to limit hacks’ damage The zero-trust initiative, which gained steam during the Biden administration, is still underway.

US still prioritizing zero-trust migration to limit hacks’ damage: www.cybersecuritydive.com/news/governm... (by @ericjgeller.com)

CISA’s relationship with industry needs work to reestablish trust, experts say Critics say budget cuts, job losses have hurt the agency’s ability to coordinate with private industry.

CISA’s relationship with industry needs work to reestablish trust, experts say: www.cybersecuritydive.com/news/cisas-i... (by David Jones)

SonicWall investigating possible zero-day related to firewall attacks Researchers recently warned about a surge in Akira ransomware attacks linked to a potential SonicWall vulnerability.

SonicWall investigating possible zero-day related to firewall attacks: www.cybersecuritydive.com/news/sonicwa... (by David Jones)

Cybersecurity budgets tighten as economic anxiety rises Uncertain tariff policies and fluctuating inflation and interest rates are leading to stagnant or reduced budgets, according to an IANS Research report.

Cybersecurity budgets tighten as economic anxiety rises: www.cybersecuritydive.com/news/cyberse... (by Alexei Alexis)

AI is helping hackers automate and customize cyberattacks CrowdStrike’s annual cyber-threat-hunting report reveals the double threat that AI poses to many businesses.

AI is helping hackers automate and customize cyberattacks: www.cybersecuritydive.com/news/ai-auto... (by @ericjgeller.com)

Senate confirms Trump’s national cyber director nominee Sean Cairncross, a political veteran without significant cybersecurity experience, could turn the relatively new White House office into a major player in the administration

Senate confirms Trump’s national cyber director nominee: www.cybersecuritydive.com/news/sean-ca... (by @ericjgeller.com)

Palo Alto Networks investigating ransomware threat related to SharePoint exploitation Researchers said an unidentified hacker demanded a ransom after an intrusion linked to the SharePoint flaw.

Palo Alto Networks investigating ransomware threat related to SharePoint exploitation: www.cybersecuritydive.com/news/palo-al... (by David Jones)

DOJ reaches $9.8 million settlement with Illumina over cyber whistleblower claims The U.S. alleged the company knowingly sold genetic-sequencing systems with software vulnerabilities to federal agencies.

DOJ reaches $9.8 million settlement with Illumina over cyber whistleblower claims: www.cybersecuritydive.com/news/cyber-f... (by David Jones)

Industry groups urge vigilance as Scattered Spider evolves tactics Information-sharing organizations warned their members that Scattered Spider continues to pose a major threat.

Industry groups urge vigilance as Scattered Spider evolves tactics: www.cybersecuritydive.com/news/ISAC-vi... (by David Jones)

Ransomware gangs capitalize on law enforcement takedowns of competitors After authorities dismantled LockBit and RansomHub, other groups rushed in to snatch up their affiliates, according to a new report that highlights a cybercrime ecosystem in flux.

Ransomware gangs capitalize on law enforcement takedowns of competitors: www.cybersecuritydive.com/news/ransomw... (by @ericjgeller.com)

CISA’s Joint Cyber Defense Collaborative takes major personnel hit JCDC’s troubles add to the woes of the already-depleted CISA, which could lose even more personnel as additional contracts with private companies expire.

CISA’s Joint Cyber Defense Collaborative takes major personnel hit: www.cybersecuritydive.com/news/cisa-jo... (by @ericjgeller.com)

‘Shadow AI’ increases cost of data breaches, report finds Companies are failing to protect their AI tools from compromise, often leading to more extensive data breaches, according to new data from IBM.

‘Shadow AI’ increases cost of data breaches, report finds: www.cybersecuritydive.com/news/artific... (by @ericjgeller.com)

FBI, CISA warn about Scattered Spider’s evolving tactics International authorities are pursuing the group following the arrests of four suspects in a series of attacks targeting British retailers.

FBI, CISA warn about Scattered Spider’s evolving tactics: www.cybersecuritydive.com/news/fbi-cis... (by David Jones)

Ransomware attacks against oil and gas firms surge Manufacturing remains the number one ransomware target, new data from Zscaler shows.

Ransomware attacks against oil and gas firms surge: www.cybersecuritydive.com/news/zscaler... (by @ericjgeller.com)

Research shows LLMs can conduct sophisticated attacks without humans The project, launched by Carnegie Mellon in collaboration with Anthropic, simulated the 2017 Equifax data breach.

Research shows LLMs can conduct sophisticated attacks without humans: www.cybersecuritydive.com/news/researc... (by David Jones)

Allianz Life discloses massive data breach linked to supply-chain attack The intrusion comes amid a wave of recent social-engineering attacks targeting the insurance sector and other industries.

Allianz Life discloses massive data breach linked to supply-chain attack: www.cybersecuritydive.com/news/allianz... (by David Jones)

Philadelphia Indemnity Insurance discloses June data breach The regulatory filing follows a wave of hacks against the industry that researchers have linked to Scattered Spider.

Philadelphia Indemnity Insurance discloses June data breach: www.cybersecuritydive.com/news/philade... (by David Jones)

Treasury sanctions North Koreans involved in IT-worker schemes Authorities also charged several of the indicted people with attempting to evade U.S. sanctions on North Korea.

Treasury sanctions North Koreans involved in IT-worker schemes: www.cybersecuritydive.com/news/north-k... (by @ericjgeller.com)

What we know about the Microsoft SharePoint attacks State-linked hackers and ransomware groups are targeting SharePoint customers across the globe.

What we know about the Microsoft SharePoint attacks: www.cybersecuritydive.com/news/what-we... (by David Jones)

Senators push CISA director nominee on election security, agency focus Sean Plankey said he would double down on CISA’s core mission and “allow the operators to operate.”

Senators push CISA director nominee on election security, agency focus: www.cybersecuritydive.com/news/cisa-di... (by @ericjgeller.com)

Trump AI plan calls for cybersecurity assessments, threat info-sharing It remains unclear how federal agencies depleted by layoffs will be able to implement the strategy’s ambitious vision, which includes an ISAC dedicated to AI.

Trump AI plan calls for cybersecurity assessments, threat info-sharing: www.cybersecuritydive.com/news/white-h... (by @ericjgeller.com)

SharePoint hacking campaign affects hundreds of systems worldwide CISA is responding to potential compromises at federal agencies and various state and local entities.

SharePoint hacking campaign affects hundreds of systems worldwide: www.cybersecuritydive.com/news/sharepo... (by David Jones)

Clorox files $380 million suit blaming Cognizant for 2023 cyberattack The attack, linked to Scattered Spider, disrupted production of household cleaners and other goods.

Clorox files $380 million suit blaming Cognizant for 2023 cyberattack: www.cybersecuritydive.com/news/clorox-... (by David Jones)

Lapsed CISA contract impedes national lab’s threat-hunting operations The CyberSentry program remains operational, according to CISA, with analysts outside the lab continuing to review sensor data.

Lapsed CISA contract impedes national lab’s threat-hunting operations: www.cybersecuritydive.com/news/cisa-cy... (by @ericjgeller.com)