cybersecurity

CISA scrambles to contact fired employees after court rules layoffs ‘unlawful’

The U.S. government’s cybersecurity agency is scrambling to contact more than 130 former employees after a federal court ruled that the Trump administration must reinstate workers it “unlawfully” fired. U.S. District Judge James Bredar last week ordered the Trump administration to reinstate employees laid off across a number of U.S. government agencies, including the Department […]

CISA scrambles to contact fired employees after court rules layoffs ‘unlawful’ Read More »

Texas man faces prison for activating ‘kill switch’ on former employer’s network

Texas software developer Davis Lu faces up to 10 years in prison after a federal jury convicted him of “causing intentional damage” to his former employer’s network. According to the Justice Department, Lu, 55, began sabotaging his employer’s systems after a 2018 corporate restructuring left Lu with reduced responsibilities and system access.  Lu is accused

Texas man faces prison for activating ‘kill switch’ on former employer’s network Read More »

Hackers are exploiting Fortinet firewall bugs to plant ransomware

Security researchers have observed hackers linked to the notorious LockBit gang exploiting a pair of Fortinet firewall vulnerabilities to deploy ransomware on several company networks.  In a report published last week, security researchers at Forescout Research said a group it’s tracking dubbed “Mora_001” is exploiting the Fortinet firewalls, which sit on the edge of a

Hackers are exploiting Fortinet firewall bugs to plant ransomware Read More »

DOGE staffer violated Treasury rules by emailing unencrypted personal data

A staffer working for the Department of Government Efficiency (DOGE) broke Treasury policies by sending an email containing unencrypted personal information, according to testimony from a senior government cybersecurity official in a federal lawsuit. Marko Elez, a DOGE staffer working at the U.S. Treasury, emailed a spreadsheet with unencrypted personally identifiable information to two Trump administration

DOGE staffer violated Treasury rules by emailing unencrypted personal data Read More »

Accused LockBit ransomware developer extradited to the US

Rostislav Panev, a 51-year-old dual Russian and Israeli national who is accused of being a key developer for the notorious LockBit ransomware gang, has been extradited from Israel to the United States, the Department of Justice announced on Thursday.  Panev was arrested in Israel in December 2024, becoming the third person arrested for their role

Accused LockBit ransomware developer extradited to the US Read More »

DOGE axes CISA ‘red team’ staffers amid ongoing federal cuts

Elon Musk’s Department of Government Efficiency (DOGE) has fired more than a hundred employees working for the U.S. government’s cybersecurity agency CISA, including “red team” staffers, two people affected by the layoffs told TechCrunch.  The people, who asked not to be named, said affected employees were axed immediately when their network access was revoked with

DOGE axes CISA ‘red team’ staffers amid ongoing federal cuts Read More »

Sola emerges from stealth with $30M to build the ‘Stripe for security’

Enterprises these days can choose from hundreds of apps and services available to secure their networks, data and assets — nearly as many more to help them manage all the alerts and extra work that those security apps generate. But what if you could build your own apps, customised to your own workloads, to simplify

Sola emerges from stealth with $30M to build the ‘Stripe for security’ Read More »

What PowerSchool won’t say about its data breach affecting millions of students

We’re only a few months into 2025, but the recent hack of U.S. edtech giant PowerSchool is on track to be one of the biggest education data breaches in recent years.  PowerSchool, which provides K-12 software to more than 18,000 schools to support some 60 million students across North America, first disclosed the data breach

What PowerSchool won’t say about its data breach affecting millions of students Read More »

Japanese telco giant NTT Com says hackers accessed details of almost 18,000 organizations

Japanese telecom giant NTT Communications (NTT Com) has confirmed that hackers accessed the data of almost 18,000 corporate customers during a February cyberattack, affecting an as-yet-unknown number of individuals. The Tokyo-based NTT Com, which provides phone and network tech to enterprises, said it discovered the data breach on February 5 after determining that the hackers

Japanese telco giant NTT Com says hackers accessed details of almost 18,000 organizations Read More »