Explore

US Space Force Enhances Cybersecurity for Space Launch Operations

US Space Force Enhances Cybersecurity for Space Launch Operations

The US Space Force (USSF) has established two new squadrons dedicated to defending space launch operations from cyberattacks. The 630th Cyberspace Squadron was activated at Vandenberg Space Force Base, while the 645th Cyberspace Squadron was reassigned to Patrick Space Force Base. These squadrons are tasked with real-time monitoring and defense against potential cyber threats during launch operations. The initiative reflects the growing importance of cybersecurity in space operations, as digital threats have become a significant concern alongside traditional physical security measures.

White House Cyber Strategy Prioritizes Offensive Measures Amid Rising Threats

White House Cyber Strategy Prioritizes Offensive Measures Amid Rising Threats

The White House has released a new cyber strategy that emphasizes proactive or offensive cybersecurity measures as a top priority. This shift comes in response to a rapidly evolving threat environment characterized by faster, more coordinated, and increasingly automated cyber threats. Traditionally, cybersecurity has relied on a reactive model, focusing on detecting intrusions, patching vulnerabilities, and responding to incidents. However, this approach is under pressure as cyber threats become more sophisticated. At the recent RSA Conference, Sandra Joyce from Google's Threat Intelligence Group introduced a threat disruption unit aimed at actively thwarting cyber threat groups using legal and technical capabilities. These developments highlight a significant shift from defensive to offensive cybersecurity strategies.

LAPD Data Breach Exposes Sensitive Police Documents in Major Cybersecurity Incident

LAPD Data Breach Exposes Sensitive Police Documents in Major Cybersecurity Incident

Hackers have reportedly stolen and leaked a substantial amount of sensitive documents from the Los Angeles Police Department (LAPD), including personnel files and internal affairs investigations. The breach, attributed to the extortion gang World Leaks, involved data from a digital storage system belonging to the Los Angeles City Attorney’s Office. The leaked data, which includes unredacted criminal complaints and personal information, was briefly posted online before being removed. The LAPD is investigating the breach, which did not involve its systems but rather a third-party tool. The breach exposed 7.7 terabytes of data and over 337,000 files, marking a significant breach of police data.

Iranian Cyber Actors Exploit U.S. Critical Infrastructure via PLCs

Iranian Cyber Actors Exploit U.S. Critical Infrastructure via PLCs

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory warning of Iranian-affiliated cyber actors exploiting programmable logic controllers (PLCs) across U.S. critical infrastructure sectors. These actors have targeted internet-facing operational technology devices, including those manufactured by Rockwell Automation/Allen-Bradley, leading to disruptions in several sectors. The advisory urges U.S. organizations to review tactics, techniques, and procedures to identify potential compromises and apply recommended mitigations. The exploitation has resulted in operational disruptions and financial losses, highlighting the need for enhanced cybersecurity measures in critical infrastructure.

Hacker Breaches Chinese Supercomputer, Attempts to Sell Stolen Data

Hacker Breaches Chinese Supercomputer, Attempts to Sell Stolen Data

A hacker has allegedly breached a Chinese supercomputer, stealing a vast amount of sensitive data, including classified defense documents and missile schematics. The data, reportedly over 10 petabytes, was taken from the National Supercomputing Center in Tianjin, which serves over 6,000 clients, including advanced science and defense agencies. The hacker, using the alias FlamingChina, posted a sample of the data on a Telegram channel, claiming it includes research from various fields such as aerospace engineering and military research. Cybersecurity experts have reviewed the samples and believe the breach was achieved through a compromised VPN domain, allowing the hacker to siphon data over several months without detection.

CISA Mandates Urgent Patching of Fortinet EMS Vulnerability to Protect Federal Networks

CISA Mandates Urgent Patching of Fortinet EMS Vulnerability to Protect Federal Networks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to secure FortiClient Enterprise Management Server (EMS) instances against a critical vulnerability by Friday. This security flaw, identified as CVE-2026-35616, was discovered by cybersecurity firm Defused. It is described as a pre-authentication API access bypass that allows attackers to circumvent authentication and authorization controls. Fortinet has released emergency hotfixes to address this vulnerability, which stems from improper access control weaknesses. The flaw has been actively exploited in zero-day attacks, prompting Fortinet to urge IT administrators to apply the hotfixes or upgrade to FortiClient EMS version 7.4.7. CISA has added this vulnerability to its Known Exploited Vulnerabilities Catalog and mandated that Federal Civilian Executive Branch agencies patch their systems by April 9, as per Binding Operational Directive 22-01.

Iran-Linked Cyberattacks Disrupt U.S. Critical Infrastructure

Iran-Linked Cyberattacks Disrupt U.S. Critical Infrastructure

Six U.S. federal agencies have warned of cyberattacks by Iran-affiliated threat actors targeting programmable logic controllers at critical infrastructure sites. These attacks have affected water, wastewater, energy, and government facilities, causing operational disruptions and financial losses. The advisory links the attacks to escalating hostilities between Iran, the U.S., and Israel, and highlights the need for organizations to review their cybersecurity measures.

Iranian Hackers Escalate Attacks on US Critical Infrastructure Amid Hostilities

Iranian Hackers Escalate Attacks on US Critical Infrastructure Amid Hostilities

Iranian hacking campaigns have intensified against US critical infrastructure sectors, including government services, water systems, and energy facilities. According to a joint advisory from US cybersecurity, law enforcement, and intelligence agencies, these hackers are targeting programmable logic controllers and supervisory control and data acquisition displays. The aim is to cause disruptive effects within the United States, with some activities already resulting in operational disruptions and financial losses. This escalation coincides with heightened tensions between the US and Iran, as President Trump warned of severe consequences if Iran does not reach a deal with the US.

FBI Declares Breach of Surveillance Networks a 'Major Incident' Prompting Cybersecurity Enhancements

FBI Declares Breach of Surveillance Networks a 'Major Incident' Prompting Cybersecurity Enhancements

The Federal Bureau of Investigation (FBI) has classified a recent breach of its networks, used for managing wiretaps and surveillance operations, as a 'major incident.' This classification underscores the severity of the intrusion, which has led the agency to initiate a criminal investigation and enhance cybersecurity measures. The breach was first detected on February 17, and the compromised system contains sensitive law enforcement data, including electronic surveillance information and personal identification details of investigation subjects. On March 23, senior officials at the Justice Department determined the breach met the criteria for a 'major incident' under the Federal Information Security Modernization Act, which mandates security measures to protect government computer systems. The FBI and Justice Department are conducting forensic examinations and other remedial efforts to address the breach.

New Hampshire Appoints Pamela McLeod as New Chief Information Security Officer

New Hampshire Appoints Pamela McLeod as New Chief Information Security Officer

Pamela McLeod has been appointed as the new Chief Information Security Officer (CISO) for New Hampshire, effective April 17. She will report to Denis Goulet, the state's Chief Information Officer. McLeod replaces Ken Weeks, who has transitioned to a private-sector role as a national security adviser with The ATOM Group. McLeod brings significant public-sector technology experience, having previously served as the director of cybersecurity at ACT and as CISO for the Concord School District. Her appointment is part of New Hampshire's whole-of-state cybersecurity effort, which involves collaboration across various departments to enhance public-sector cyber defenses.

FBI Declares Network Breach a 'Major Incident' Amid Cybersecurity Concerns

FBI Declares Network Breach a 'Major Incident' Amid Cybersecurity Concerns

The FBI has classified a recent breach of its networks, used for managing wiretaps and surveillance, as a 'major incident.' The breach, first detected on February 17, involved sophisticated techniques exploiting a commercial Internet Service Provider's infrastructure. The affected system contains sensitive law enforcement information, including data from electronic surveillance. The Justice Department and FBI are conducting forensic examinations and have established a working group to enhance cyber resilience. The breach's classification as a 'major incident' underlines its potential to harm national security and US interests.

U.S. Cybersecurity Strategy Shifts to Proactive Defense Amid Rising Threats

U.S. Cybersecurity Strategy Shifts to Proactive Defense Amid Rising Threats

The U.S. government is transitioning from a reactive cybersecurity model to a proactive approach, aiming to disrupt cyber threats before they reach their targets. This shift is highlighted by the White House's new cyber strategy, which prioritizes offensive cybersecurity measures. Major technology companies, such as Google, are investing in capabilities to actively thwart cyber threats. This change comes as traditional defensive models struggle to keep pace with increasingly sophisticated and automated cyber threats.