Cyber Attacks
Mastodon.social, the primary gateway to the decentralized Fediverse, has successfully restored services following a sustained Distributed Denial of Service (DDoS) attack that disrupted access for millions of users. JENA, GERMANY — The resilience of decentralized social media was put to the test this week as Mastodon.social, the platform'
Policy & Government
As the fallout from systemic attacks on healthcare providers continues to mount, federal lawmakers and former intelligence officials are pushing for a radical reclassification of ransomware: treating digital extortion as a capital crime. WASHINGTON, D.C. — The legal immunity traditionally enjoyed by cybercriminals — often shielded by international borders and the
Threat Intelligence
In a rare turn of events, security researchers have observed a surge in failed exploitation attempts targeting a high-severity vulnerability in discontinued TP-Link routers, highlighting the technical hurdles of weaponizing code for aging hardware. SHENZHEN, CHINA — A wave of automated attacks targeting the TP-Link Archer AX21 (v1.2) has largely
National Security
New mandates for the Marine Transportation System (MTS) transition from guidance to enforcement, requiring vessel owners and port operators to implement rigorous cyber-risk reporting and governance. WASHINGTON, D.C. — The U.S. Coast Guard (USCG) has reached a critical milestone in the implementation of the "Cybersecurity in the Marine
Critical Infrastructure
A newly discovered hybrid threat, ZionSiphon, marks a significant escalation in industrial warfare, moving beyond data theft toward the physical sabotage of desalination and treatment plants. TEL AVIV, ISRAEL — Cybersecurity researchers have identified a sophisticated new malware strain, dubbed ZionSiphon, engineered specifically to infiltrate and sabotage Israeli water infrastructure. Unlike
Vulnerabilities
The "Jolokia" vulnerability allows for unauthenticated Remote Code Execution, posing a significant risk to the message-brokering infrastructure that underpins global finance and logistics. WASHINGTON, D.C. — The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical input validation vulnerability in Apache ActiveMQ to its Known Exploited
Artificial Intelligence (A.I.)
In an unprecedented open letter to business leaders, UK ministers and the NCSC warn that the "defensive advantage" is shrinking as AI models lower the barrier for sophisticated cyberattacks. LONDON, UK — The UK Government has issued a stark warning regarding the escalating cybersecurity risks posed by the rapid
Nation-State Cyber Threats
A newly identified campaign by the threat actor UAC-0247 is targeting healthcare facilities and government agencies, utilizing "urgent" document lures to deploy info-stealing malware. KYIV, UKRAINE — A persistent cyber-espionage campaign attributed to the threat group UAC-0247 has significantly expanded its operations, targeting Ukrainian hospitals, medical clinics, and government
Data Breaches
Cookeville Regional Medical Center (CRMC) confirms a month-long unauthorized access incident that exposed sensitive medical records, Social Security numbers, and financial data. COOKEVILLE, TN — Cookeville Regional Medical Center (CRMC) has begun notifying 337,917 individuals that their highly sensitive personal and medical information was compromised during a sophisticated cyberattack. The
Vulnerabilities
A severe vulnerability in the popular Nginx UI management tool is being actively exploited, allowing attackers to bypass authentication and gain full command execution on hosting infrastructure. SAN FRANCISCO, CA — Security researchers have issued an urgent warning following the discovery of CVE-2026-33032, a critical vulnerability in Nginx UI — a widely
National Security
The Federal Communications Commission has granted Netgear a conditional waiver, allowing the networking giant to continue importing foreign-manufactured hardware through October 2027 while rivals face a total market freeze. WASHINGTON, D.C. — In a decision that has sent shockwaves through the consumer electronics industry, the Federal Communications Commission (FCC) has
National Security
Swedish authorities have declassified details of a thwarted "destructive" cyberattack against a thermal power plant, warning of a dramatic escalation in hybrid warfare targeting European energy grids. STOCKHOLM — The Swedish government has formally attributed a sophisticated 2025 cyberattack against a domestic thermal power plant to a pro-Russian hacking