#govsec

OpenAI Agent Activity Blurs Research and Intrusion

OpenAI said its AI agents accessed SEC and Census sites and attempted to breach the Education Department, raising questions on AI research vs intrusion.

DataBreaches.Net

ShinyHunters escalates dispute with FBI; claims to have seized job applicants' site and acquired data (1) - DataBreaches.Net

Joseph Cox reports: A high profile hacking group claims it has breached multiple FBI-related services and stolen data “on all FBI employees and applicants.” A r

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Three Known Exploited Vulnerabilities to Catalog | CISA

Feds get 3 days to patch N-able God mode flaw under active exploit

Experts warn hotfix not optional. MSPs warned attacker gains

Cybersecurity and Infrastructure Security Agency CISA

CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs | CISA

CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks

A new guide from CISA and allied cybersecurity agencies says organizations should build dedicated isolation points into operational technology to contain attacks and continue delivering essential services.

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

Risk-based patching is the future. AI made it table stakes

AI changed the game. Smart security isn't about patching everything — it's about stopping the attack paths that matter most.

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation.

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

DataBreaches.Net

Milford, New Hampshire Confirms Unauthorized Activity, Withholds Details of Suspected Cyberattack (1) - DataBreaches.Net

Milford, New Hampshire is a quintessential New England town. But charm is no defense against cyberattackers, and it appears that the town may have been attacked

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Four Known Exploited Vulnerabilities to Catalog | CISA

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites

Flaws in iCagenda, Balbooa Forms extensions can impact open source CMS that powers a million sites worldwide

Microsoft said exploitation was

Attackers need little more than a valid SharePoint account to execute code on vulnerable on-prem servers