The vendor said it’s not aware of any active exploitation of the vulnerabilities, which could allow remote attackers to achieve root access and execute code.
The post Cisco reveals 2 max-severity defects in firewall management software appeared first on CyberScoop.
Microsoft, which led the effort, said it seized 330 domains that powered the phishing platform’s core infrastructure. The alleged creator was also named in a civil complaint.
The post Global coalition dismantles Tycoon 2FA phishing kit appeared first on CyberScoop.
The author of a new study told CyberScoop he's "very worried,” describing deanonymization capabilities of AI as a “large scale invasion of privacy.”
The post LLMs are getting better at unmasking people online appeared first on CyberScoop.
The marketplace was one of the world’s largest hubs for cybercrime with more than 142,000 members. Officials identified and arrested multiple suspects after seizing the site’s database.
The post Authorities from 14 countries shut down major cybercrime forum LeakBase appeared first on CyberScoop.
Blind spots in complex cloud environments allow identity-based attacks to achieve the same outcome as complex malware or zero-day exploits. Sophistication need not apply.
The post Attackers are using your network against you, according to Cloudflare appeared first on CyberScoop.
Researchers traced the kit moving from a spyware vendor’s customer to Russian hackers to Chinese cybercriminals.
The post Possible U.S.-developed exploits linked to first known ‘mass’ iOS attack appeared first on CyberScoop.
Through a simple calendar invite, AI browsers like Comet can be directed to access local file systems, browse directories, open and read files, and exfiltrate data.
The post Researchers discover suite of agentic AI browser vulnerabilities appeared first on CyberScoop.
His nearly five-year tenure had recently been marked by turmoil.
The post CISA CIO Robert Costello exits agency appeared first on CyberScoop.
The company’s latest security update contains the highest number of Android vulnerabilities patched in a single month since April 2018.
The post Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities appeared first on CyberScoop.
Brett Leatherman is running the bureau's most public cyber campaign yet, pushing basic security hygiene while quietly preparing industry for stepped-up Chinese threats.
The post The FBI’s cyber chief is using Winter SHIELD to accelerate China prep, threat intelligence sharing appeared first on CyberScoop.
Silent probing uses AI to measure your team’s response patterns over time, building a behavioral profile that makes follow-on attacks harder to spot and easier to time.
The post How ‘silent probing’ can make your security playbook a liability appeared first on CyberScoop.
Trolls on 4chan generated sexualized images of female athletes, and the White House shared an AI-manipulated video of a hockey player—welcome to the new normal.
The post From fake nudes to fake quotes: AI deepfakes plagued Olympic athletes appeared first on CyberScoop.
The move follows a story about criticisms of CISA’s performance during the first year of the Trump administration, with Madhu Gottumukkala’s leadership a point of contention.
The post Gottumukkala out, Andersen in as acting CISA director appeared first on CyberScoop.
Officials said 30 perpetrators have been arrested in the past year, and global law enforcement cooperation is closing the gap.
The post Project Compass is Europol’s new playbook for taking on The Com appeared first on CyberScoop.
A legislative package that would overhaul cybersecurity practices at the Department of Health and Human Services sailed through committee.
The post Senate moves one step closer to passing health care cyber reforms appeared first on CyberScoop.
The global campaign marks the second series of multiple actively exploited zero-day vulnerabilities in Cisco edge technology since last spring. The similarities don’t end there.
The post Governments issue warning over Cisco zero-day attacks dating back to 2023 appeared first on CyberScoop.
Too many defenders and researchers are paying attention to defects and unsubstantiated exploit concepts that aren’t worth their time, VulnCheck’s Caitlin Condon said.
The post Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacks appeared first on CyberScoop.
The agency lost a third of its people in a year. Now industry and lawmakers on both sides say it's unprepared for a potential crisis.
The post Across party lines and industry, the verdict is the same: CISA is in trouble appeared first on CyberScoop.
OpenAI said a Chinese law enforcement agency uploaded reports to ChatGPT that details a worldwide digital operation to track and silence regime critics at home and abroad.
The post Chinese group’s ChatGPT use reveals worldwide harassment campaign against critics appeared first on CyberScoop.
Additionally, the U.S. Treasury sanctioned the Russian zero-day brokerage that Peter Williams sold the exploits to.
The post Ex-L3Harris executive sentenced to 87 months in prison for selling zero-day exploits to Russian broker appeared first on CyberScoop.
