Explore

Westermo and Intel Collaborate on Edge Computing Solutions for Digital Substations

Westermo and Intel Collaborate on Edge Computing Solutions for Digital Substations

Westermo, a provider of mission-critical network infrastructure, and Intel are partnering to develop a technology foundation aimed at modernizing digital substations and intelligent grid operations for electric utilities and critical infrastructure operators. This collaboration will integrate Westermo’s industrial networking, utility communications, and operational technology cybersecurity capabilities with Intel’s edge computing, artificial intelligence, and virtualization technologies. The initiative seeks to address the challenges utilities face in upgrading aging systems while maintaining deterministic performance, reliability, cybersecurity, and long service life. The goal is to create a more flexible and scalable architecture that can support distributed energy resources, renewable generation, electrification, AI data centers, and evolving power flow demands. By combining resilient networking with edge computing, the companies aim to reduce reliance on specialized hardware, allowing multiple applicat...

SilentAir Hackers Intercept Calls and SMS from Mobile Networks, Targeting High-Profile Figures

A previously unknown threat actor, tracked as SilentAir by telecom software and cybersecurity company Enea, is actively intercepting phone calls and text messages by compromising mobile operator infrastructure. Enea assesses with high confidence that SilentAir is a new state-level actor, with Taiwan being its primary target. The hackers launch signaling attacks, primarily over SS7 and sometimes Diameter protocols, from hijacked network nodes within mobile operators. These attacks reroute a target's incoming calls and SMS messages through the compromised node, allowing the hackers to harvest subscriber details. While location tracking is also possible, it constitutes a smaller portion of their activity. SilentAir also sends 'silent SMS messages' that do not appear on the recipient's phone, likely to verify the success of earlier interception attempts. Enea has been monitoring these attacks since early 2025, with evidence suggesting activity predates this period. The hijacked nodes are located in at least si...

FedRAMP Implements New Cyber Vulnerability Rules to Counter AI-Accelerated Threats

FedRAMP Implements New Cyber Vulnerability Rules to Counter AI-Accelerated Threats

FedRAMP, the General Services Administration’s centralized cloud security program, is mandating new cyber vulnerability management practices for cloud service providers (CSPs) serving federal agencies. These new rules, known as Vulnerability Detection and Response (VDR) and Vulnerability Evaluation and Reporting (VER), are a direct response to how advanced AI models are enabling hackers to accelerate attacks on unpatched software bugs. CSPs must migrate from legacy vulnerability scanning to an 'exposure and threat-based approach,' evaluating factors like whether a vulnerability is 'likely reachable' over the internet and its exploitability. The deadline for compliance is early December, with a grace period until March 7, 2027. Failure to comply or submit a corrective action plan will result in certification revocation and a one-year ban from FedRAMP.

Black Duck Software Seeks Lead Technical Success Manager for Application Security

Black Duck Software Seeks Lead Technical Success Manager for Application Security

Black Duck Software Seeks Lead Technical Success Manager for Application Security

Cloud Bill Mistakes Costing Businesses Over $30,000 Monthly Due to Oversight

Cloud Bill Mistakes Costing Businesses Over $30,000 Monthly Due to Oversight

Cloud Bill Mistakes Costing Businesses Over $30,000 Monthly Due to Oversight

South Korea Updates Personal Data Security Guidance to Include Passkeys Amid Rising Cyber Threats

South Korea Updates Personal Data Security Guidance to Include Passkeys Amid Rising Cyber Threats

South Korea's privacy regulator, the Personal Information Protection Commission (PIPC), has updated its official guidance for protecting personal information. This revision now includes passkeys as a recognized option for passwordless authentication, expanding the number of approved authentication methods from seven to twelve. Other additions to the guidance include QR codes and mobile applications. The updated directives also mandate that public sector systems undergo annual vulnerability assessments and penetration testing, with prompt remediation of any identified weaknesses. Furthermore, the PIPC has issued warnings against storing encryption keys in plaintext within application source code or configuration files and has addressed API security, delayed software updates, and preparations for post-quantum cryptography. These changes are a direct response to growing cybersecurity concerns, as South Korean government systems recorded 1.57 billion suspected attack alerts between January and July of the curr...

Cybersecurity Experts Warn of Evolving ClickFix Social Engineering Attacks

Cybersecurity Experts Warn of Evolving ClickFix Social Engineering Attacks

Cybersecurity experts are issuing warnings about the evolution of ClickFix, a social engineering technique that manipulates users into executing malicious commands through deceptive browser verification prompts. Threat actors are continuously refining these methods to deliver various payloads, including Remote Access Trojans (RATs), loaders, and infostealers. Recent variants of ClickFix attacks incorporate advanced techniques such as steganographic delivery, where malicious code is hidden within seemingly innocuous files like PNG images, and browser-cache-seeded execution chains. Huntress, a cybersecurity firm, has investigated multiple ClickFix variants, observing their deployment through malvertising, typosquatting, and SEO poisoning campaigns. These investigations have uncovered attack chains utilizing Node.js-based RATs like DuskDesk and exploiting DLL sideloading with legitimate Microsoft binaries. The attacks have also demonstrated lateral movement capabilities, targeting domain controllers via nativ...

Nationwide Seeks Software Engineer for E-Risk Services in Rockaway, New Jersey, to Enhance Secure Technology Solutions

Nationwide Seeks Software Engineer for E-Risk Services in Rockaway, New Jersey, to Enhance Secure Technology Solutions

Nationwide Seeks Software Engineer for E-Risk Services in Rockaway, New Jersey, to Enhance Secure Technology Solutions

Leidos Seeks Splunk Administrator in Suitland, MD for Navy Cyber Operations

Leidos Seeks Splunk Administrator in Suitland, MD for Navy Cyber Operations

Leidos is actively recruiting a Splunk Administrator in Suitland, Maryland, to support its Navy customer. This full-time position requires an individual with an active TS/SCI clearance and IAT Level III certification, such as CISSP. The primary responsibilities of this role include administering, configuring, and maintaining Splunk Enterprise, its Add-ons, and Universal Forwarders. The administrator will also be tasked with building SQL queries, dashboards, alerts, and CIM-compliant data mappings. Integration of Splunk with various systems, including AWS, databases, Linux, and Windows, is a key component of the job. Furthermore, the role involves monitoring system performance, troubleshooting ingest, parsing, and indexing issues, and supporting Risk Management Framework (RMF) compliance activities. Automation of tasks using Python and shell scripting is also expected. Candidates are generally required to have a Bachelor's degree in Computer Science, Information Technology, Information Assurance, or a relat...

AWS Network Security Manager Expands Availability to European Sovereign Cloud and 31 New Regions

AWS Network Security Manager Expands Availability to European Sovereign Cloud and 31 New Regions

AWS Network Security Manager Expands Availability to European Sovereign Cloud and 31 New Regions

CISA Enhances Cyber Incident Reporting Form Amidst Pending CIRCIA Mandate

CISA Enhances Cyber Incident Reporting Form Amidst Pending CIRCIA Mandate

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched an updated cyber incident reporting form, featuring more detailed questions about incident types and utilizing MITRE ATT&CK terms for observed activity. This enhancement, announced on November 9, aims to improve data quality, enabling CISA to identify broader threat trends from seemingly separate incidents. The revised form includes questions on malware, social engineering, hacking techniques, and insider threats. Currently, only federal civilian agencies are mandated to report incidents to CISA, but the agency encourages voluntary reporting from other organizations, with submitted information protected under the Protected Critical Infrastructure Information (PCII) Program. This update comes as the final rule for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) awaits approval from the White House, having been under review since October 1.

Tiffin University Offers Ethical Hacking Program to Combat Cyber Threats

Tiffin University Offers Ethical Hacking Program to Combat Cyber Threats

Tiffin University (TU) is providing a Bachelor of Science in Cybersecurity program that includes an Ethical Hacking Fellowship, designed to train students in responsible security practices. The program focuses on teaching students how to identify and address security weaknesses in digital systems by using methods similar to malicious attackers, but with authorization and ethical guidelines. Students learn cybersecurity terminology, ethical hacking concepts, professional standards, and legal boundaries. They develop technical skills in analyzing network traffic, identifying vulnerabilities, classifying risks, and digital forensics. The curriculum covers information security, current threats, network vulnerabilities, cyber law, incident response, cyber warfare, and mobile and wireless security. Hands-on learning is a core component, with students using common security tools, participating in lab activities, and completing a 150-hour internship. TU has been designated as a National Center of Academic Excellen...