Explore

FBI Seizes Cyber Tools Used by Chinese Hackers Targeting U.S. Critical Infrastructure

FBI Seizes Cyber Tools Used by Chinese Hackers Targeting U.S. Critical Infrastructure

The FBI and Justice Department have announced the seizure of cyber tools, specifically 'Microscan' and 'FishHub,' used by a hacking group known as Flax Typhoon, which officials associate with the Chinese government. These tools were employed to scan, phish, and hack various targets, including critical infrastructure in the U.S. and abroad. Among the identified targets were an unnamed U.S. power company, Japanese and Polish airports, Taiwanese universities, a multinational non-governmental organization, and Taiwanese critical infrastructure companies. This action represents the latest in a series of law enforcement efforts to counter the widespread hacking campaign. The FBI Cyber Division Deputy Assistant Director Jason Bilnoski described the hacking operation as 'indiscriminate and reckless.' The tools were operated by Integrity Technology Group, a Chinese-based information security company that the FBI identifies as closely associated with the Chinese government and the true identity of Flax Typhoon.

The FBI has seized tools used by Chinese hackers for cyber operations, officials say

The FBI has seized tools used by Chinese hackers for cyber operations, officials say

The FBI has seized scanning and phishing tools used by a group of hackers that officials say is associated with the Chinese government and that is responsible for disruptive cyber operations in the United States and abroad, including against the power industry, academia and critical infrastructure

US announces effort to disrupt hacking infrastructure run by China's Integrity Tech Group

US announces effort to disrupt hacking infrastructure run by China's Integrity Tech Group

(Removes last paragraph referring to no response to request for comment from China) By Raphael Satter WASHINGTON, Oct 8 (Reuters) - US officials said they seized seven internet domains in a new effort to disrupt hackers working with Chinese IT firm Integrity Technology Group.

FBI makes new arrest in ShinyHunters hacking case, Kash Patel says

FBI makes new arrest in ShinyHunters hacking case, Kash Patel says

The FBI arrested another suspect linked to the ShinyHunters group that breached the agency's jobs site last month.

Palm Beach Post

Former CIA op in $194 million fraud scheme bought Florida luxury properties

Former CIA op in $194 million fraud scheme bought Florida luxury properties

David Rush, used some of the funds to acquire four 'luxury' properties in Palm Beach and Hobe Sound, Florida, according to reports.

FBI and Secret Service Warn of Ongoing FortiBleed Attacks Compromising Over 86,000 Fortinet Devices

FBI and Secret Service Warn of Ongoing FortiBleed Attacks Compromising Over 86,000 Fortinet Devices

The FBI and U.S. Secret Service have issued a joint advisory warning that FortiBleed attacks are continuing to compromise Fortinet devices, with over 86,644 devices affected across 194 countries. These attacks primarily target internet-facing FortiGate firewalls and SSL VPN gateways. Fortinet has clarified that the activity involves the reuse of previously stolen credentials and brute-force attacks, rather than a newly discovered vulnerability. Attackers are scanning exposed FortiGate VPN portals, testing credentials from past data leaks and infostealer logs, and exploiting legacy SHA-256 password storage to crack password hashes offline. Once unauthorized access is gained, intruders can create new administrator accounts, investigate Active Directory, and attempt to access other systems. In some instances, attackers have locked legitimate administrators out of their devices by changing or deleting their accounts while retaining their own access. The advisory emphasizes that simply patching devices may not ...

FBI arrests suspect in ShinyHunters hack of the bureau's jobs portal

FBI arrests suspect in ShinyHunters hack of the bureau's jobs portal

The FBI has arrested an accused co-conspirator of the hacking group ShinyHunters

The Latest: Trump heads to Maryland in effort to tout factory investments amid economic fears

The Latest: Trump heads to Maryland in effort to tout factory investments amid economic fears

President Donald Trump headed to Maryland to tout a $3.7 billion investment by Anduril in nuclear-powered submarines

NATO Considers Major Cyberattacks as Grounds for Collective Defense Under Article 5

NATO Considers Major Cyberattacks as Grounds for Collective Defense Under Article 5

NATO officially recognizes that a large-scale cyberattack, if its consequences are severe enough, can be equated with an armed attack, potentially triggering Article 5 of the North Atlantic Treaty. Article 5 stipulates that an armed attack against one NATO member is considered an attack against all, obligating allies to provide assistance. However, invoking Article 5 in response to a cyberattack is not automatic; decisions are made on a case-by-case basis by the North Atlantic Council, requiring consensus among member states. The Alliance deliberately does not publish a specific threshold for what constitutes an Article 5-triggering cyberattack, maintaining strategic ambiguity as a deterrent. The response to such an attack is also not limited to cyber-based measures and can involve political, economic, or military instruments. This policy extends to attacks on critical infrastructure, loss of life, or paralysis of government systems due to cyber incidents. The only time Article 5 has been invoked was follo...

Cybersecurity and Infrastructure Security Agency Urged to Issue New Directive for Operational Technology Protection

Cybersecurity and Infrastructure Security Agency Urged to Issue New Directive for Operational Technology Protection

A coalition of cyber firms and critical infrastructure operators has called on the Cybersecurity and Infrastructure Security Agency (CISA) to issue a new binding operational directive (BOD) specifically for protecting operational technology (OT) systems within federal agencies. This recommendation follows recent attacks on water utilities and highlights CISA's current lack of comprehensive visibility into OT devices across federal agencies, as well as inconsistent security policies. The coalition argues that while CISA has incorporated OT security into previous directives, the increasing sophistication of cyber operations, particularly with the aid of artificial intelligence, necessitates a dedicated and encompassing BOD for OT security. The proposed directive would specify responsibilities for OT protection at each agency, draw on existing federal guidelines, and establish minimum cybersecurity practices.

Gold bars, fancy cars: Former CIA op pleads guilty in $194M fraud scheme

Gold bars, fancy cars: Former CIA op pleads guilty in $194M fraud scheme

Court documents say David Rush, 49, created fake federal entities through which he requested gold bars and other funds spent on luxury goods.

Kratos Secures Over $100 Million in Contracts for Space Intelligence Data

Kratos Secures Over $100 Million in Contracts for Space Intelligence Data

Kratos Defense & Security Solutions has announced that it has been awarded multiple contracts totaling more than $100 million. These contracts are for the provision of space and cyber capabilities, specifically focusing on delivering space intelligence data. Kratos will utilize its existing radio frequency (RF) collection infrastructure, known as the KnownSpace Network, to fulfill these obligations. While specific contract details were not disclosed, Kratos indicated that the work involves developing prototype mission applications and cyber capabilities. These efforts are designed to support electronic warfare and offensive cyber operations, providing warfighters with the ability to collect and process complex RF signals, develop intelligence on the operational environment, and support the joint targeting cycle.