Explore

FBI Classifies Cyber Intrusion as Major National Security Risk

FBI Classifies Cyber Intrusion as Major National Security Risk

The FBI has officially classified a recent cyber intrusion into one of its surveillance collection systems as a 'major incident' under the Federal Information Security Management Act (FISMA). This designation is reserved for breaches that pose serious risks to national security. The breach, reported to Congress, is believed to have been orchestrated by China, marking a significant counterintelligence failure for the FBI. The compromised systems were unclassified but contained sensitive data such as phone and internet metadata collected under court orders. The FBI detected suspicious activities on its networks in February and has since deployed all technical capabilities to respond to the breach.

FBI Issues Warning to Smartphone Users Over Foreign Apps

FBI Issues Warning to Smartphone Users Over Foreign Apps

The FBI has issued a public service announcement warning U.S. citizens about the data security risks associated with foreign-developed mobile applications, particularly those from China. The bureau highlights concerns over privacy and data collection practices, urging users to avoid installing apps with onerous policies. The warning is linked to China's national security laws, which may allow the government to access user data. The FBI advises users to check privacy policies before downloading apps and to avoid sideloading apps from unofficial sources.

DocketWise Data Breach Exposes Personal Information of 116,666 Individuals

DocketWise Data Breach Exposes Personal Information of 116,666 Individuals

DocketWise, a cloud-based immigration case management software company, has disclosed a significant data breach affecting approximately 116,666 individuals across the United States. The breach involved unauthorized access to login credentials of third-party partner repositories, which were part of a data migration pipeline for the DocketWise application. This breach exposed various types of personal information, including Social Security numbers, financial account details, and health insurance policy numbers. The company has initiated an investigation with cybersecurity experts to assess the scope of the breach and has begun notifying affected individuals.

FBI Issues Warning on Foreign Apps Collecting Americans' Data

FBI Issues Warning on Foreign Apps Collecting Americans' Data

The FBI has issued a warning to American smartphone users about the potential risks associated with foreign-developed apps, particularly those linked to China. According to the FBI, these apps can collect and store personal data overseas, even if the user has not directly downloaded the app. This can occur if a friend or family member grants the app access to their device, allowing it to pull information such as names, email addresses, and phone numbers from contact lists. The FBI's alert highlights concerns that extend beyond any single platform, such as TikTok, to a broader range of apps developed overseas. The bureau emphasized that these apps might continue to collect data in the background and store it on servers in countries where local laws could permit government access.

DocketWise Data Breach Exposes Personal Information of 116,000 Individuals

DocketWise Data Breach Exposes Personal Information of 116,000 Individuals

DocketWise, a cloud-based immigration case management software company, has disclosed a data breach affecting approximately 116,666 individuals across the United States. The breach, discovered in October 2025, involved unauthorized access to third-party partner repositories containing unstructured data. This data included sensitive personal information such as names, addresses, Social Security numbers, and financial details. The breach was reported to the Maine Attorney General on April 3, 2026, and affected individuals have been notified. DocketWise is offering 24 months of complimentary credit monitoring and identity restoration services to those impacted.

FBI Classifies Wiretap Infrastructure Breach as Major Incident, Suspects Chinese Hackers

FBI Classifies Wiretap Infrastructure Breach as Major Incident, Suspects Chinese Hackers

The FBI has officially classified a breach of its lawful wiretap infrastructure as a major incident, highlighting significant national security risks. The breach, reportedly carried out by state-sponsored Chinese hackers, involved accessing the FBI's infrastructure through a commercial ISP. The compromised system contained sensitive information, including returns from legal processes such as pen register and trap and trace surveillance returns, as well as personally identifiable information related to FBI investigations. This breach underscores the vulnerabilities in critical law enforcement infrastructure and the ongoing threat posed by sophisticated cyberattacks.

Security Researchers Uncover 'Storm' Infostealer's Remote Credential Decryption

Security Researchers Uncover 'Storm' Infostealer's Remote Credential Decryption

Security researchers at Varonis have identified a new strain of malware known as 'Storm' that targets browser credentials, session cookies, and crypto wallets. This infostealer emerged on cybercrime networks in early 2026 and represents a significant shift in credential theft tactics. Unlike traditional methods that decrypt data locally, Storm sends encrypted files to the attacker's server for decryption. This approach circumvents security measures introduced by Google in Chrome 127, which made local decryption more challenging. Storm handles data from both Chromium and Gecko-based browsers server-side, enhancing its stealth capabilities. The malware automates the retrieval of stolen logs, allowing attackers to restore hijacked sessions remotely without triggering alerts. It targets high-value platforms such as Google, Facebook, and major cryptocurrency services, with compromised data often traded on credential marketplaces.

Iran-Linked Cyberattacks Target U.S. Defense Software Suppliers Amid Rising Tensions

Iran-Linked Cyberattacks Target U.S. Defense Software Suppliers Amid Rising Tensions

Iran-linked hackers have recently initiated cyber activities targeting several U.S. organizations, including a software supplier for the defense and aerospace sectors. This development comes amid escalating geopolitical tensions, leading to increased cyber threats against government agencies, contractors, and their supply chains. The attacks are primarily opportunistic, exploiting exposed systems, weak credentials, and unpatched vulnerabilities. These cyber activities, while not highly sophisticated, can cause significant operational disruptions, especially in supply chain environments. Federal agencies and contractors are urged to adopt an 'assume breach' mindset, enhancing visibility and reinforcing fundamental cybersecurity practices to mitigate these threats.

Federal Agencies Urged to Adopt 'Assume Breach' Mindset to Enhance Cybersecurity Resilience

Federal Agencies Urged to Adopt 'Assume Breach' Mindset to Enhance Cybersecurity Resilience

Federal agencies and contractors are being advised to shift their cybersecurity strategies from attempting to prevent every cyberattack to planning for survival when breaches occur. This approach, known as the 'assume breach' mindset, emphasizes resilience over perfection. The strategy involves strengthening visibility across interconnected environments and reinforcing fundamental cybersecurity practices. The goal is to limit the impact of cyber incidents and maintain operations, rather than relying on the unrealistic expectation of preventing every intrusion. This shift is particularly important in supply chain environments, where even limited access can cause significant operational disruptions. Agencies are encouraged to prioritize protection of mission-critical systems and improve detection to contain threats before they spread.

European Cybersecurity Agency Identifies Hacking Groups Behind Major Data Breach

European Cybersecurity Agency Identifies Hacking Groups Behind Major Data Breach

The European Union's cybersecurity agency has identified a cybercriminal group known as TeamPCP as responsible for a significant data breach at the EU's executive body. The breach involved the theft of approximately 92 gigabytes of compressed data from an Amazon Web Services (AWS) account used by the European Commission. This data included personal information such as names, email addresses, and email contents. The breach affected the cloud infrastructure of the Commission's Europa.eu platform, which is used by member states to host websites and publications. The stolen data was later posted online by another hacking group, ShinyHunters. The breach originated on March 19 when hackers acquired a secret API key associated with the European Commission's AWS account, following a hack targeting the open-source security tool Trivy.

Trump's budget proposes 10% cut in discretionary spending, increased defense spending

Trump's budget proposes 10% cut in discretionary spending, increased defense spending

By Bo Erickson WASHINGTON, April 3 (Reuters) - U.S. President Donald Trump on Friday requested a 10% cut in non-defense, discretionary spending for the 2027 fiscal year, and an increase to defense spending by $500 billion, according to a White House budget document.

North Korean Hackers Exploit Phishing Tactics to Target U.S. Crypto Industry

North Korean Hackers Exploit Phishing Tactics to Target U.S. Crypto Industry

A recent incident involving North Korean hackers has highlighted the ongoing threat they pose to the U.S. crypto industry. A journalist from Fortune was targeted by a phishing attack orchestrated by hackers linked to the Democratic People’s Republic of Korea (DPRK). The attack involved a fake Zoom link sent via Telegram, which, if executed, would have allowed the hackers to access sensitive information such as passwords and cryptocurrency holdings. This incident is part of a broader pattern of North Korean cyber activities aimed at stealing cryptocurrency to fund the regime, which reportedly accumulated $2 billion in stolen crypto in 2025 alone. The hackers use sophisticated social engineering tactics, often impersonating known contacts to gain trust before launching their attacks.