Future of CVE Program in limbo as CISA, board members debate path forward via @jgreig.bsky.social & @therecordmedia.bsky.social

We are ruled by some of the dumbest people "Senate aides echoed concerns that cybersecurity industry stakeholders have also shared with Axios: That Paul is conflating CISA the agency with the information-sharing program, which shares the same acronym." www.axios.com/2025/09/19/c...

The DOJ said Jubair and other Scattered Spider members extorted more than $115 million in ransoms from dozens of victims since 2022 He's also allegedly behind a breach of the U.S. federal court network therecord.media/scattered-sp...

Debate is raging over the CVE Program as current board members and CISA vie for control following the April 2025 funding fiasco at DHS therecord.media/cve-program-...

BreachForums founder and lead administrator Conor Fitzpatrick was given a new three-year prison sentence on Tuesday after a three-judge panel in January vacated a controversial district court decision that set him free after just 17 days in prison therecord.media/conor-fitzpa...

Ransomware gang takedowns causing explosion of new, smaller groups via @jgreig.bsky.social & @therecordmedia.bsky.social

Here's @jgreig.bsky.social explaining why a problem with one cloud platform is drawing the attention of other, more famous cloud platforms. If your thought is, "everyone appears to be a customer of everyone else," you might be right. therecord.media/salesloft-dr...

Cloudflare, Zscaler among companies impacted by Salesloft Drift incident via @jgreig.bsky.social & @therecordmedia.bsky.social

😔 - thousands of people having data leaked almost isn’t a story any more. Major blood center says thousands had data leaked in January ransomware attack via @jgreig.bsky.social & @therecordmedia.bsky.social

The SwissBorg platform said about $41 million worth of cryptocurrency was stolen during a cyber incident affecting a partner company this week. In an update on Tuesday, the company pledged to make all affected customers whole and said it is still investigating the incident. ✍️ @jgreig.bsky.social

Confession: I can’t hear LockerGogo without hearing Lady Gaga, I guess I don’t have a poker face about it. Ukrainian national charged with helping run LockerGoga, MegaCortex and Nefilim ransomware Via @jgreig.bsky.social & @therecordmedia.bsky.social

Vietnam, Panama governments suffer incidents leaking citizen data via @jgreig.bsky.social & @therecordmedia.bsky.social

Uvalde school district says ransomware attack forcing closure until Thursday via @jgreig.bsky.social @therecordmedia.bsky.social

I mean…I guess better late than never? I didn’t see anything new in the report, it it’s still useful to see the TTPs in one place. FBI warns of Scattered Spider and ShinyHunters attacks on Salesforce platforms Via @jgreig.bsky.social & @therecordmedia.bsky.social

Government agencies in Vietnam and Panama were hit with cyberattacks this week, exposing troves of financial information from citizens of both countries therecord.media/vietnam-cic-...

An indictment was unsealed on Tuesday charging Volodymyr Viktorovich Tymoshchuk for his alleged role as an administrator of several ransomware strains including LockerGoga, MegaCortex and Nefilim therecord.media/lockergoga-m...

Talked to 23 people who suddenly have to pay huge tariffs or otherwise cannot get chainmail from Pakistan, yarn from France, retro computers from Japan, metal music from the Netherlands, DVDs from Germany, cosplay supplies, sunscreen, etc. www.404media.co/its-just-a-m...

The Trump administration is abandoning any intention of breaking up the joint leadership of U.S. Cyber Command and the National Security Agency, US officials told @martinmatishak.bsky.social therecord.media/cyber-comman...

I spoke to @ransomwaresommelier.com, John Fokker and several other cyber experts about the scattering of the #ransomware landscape due to law enforcement takedowns and what that means for potential victims therecord.media/ransomware-g...

Pennsylvania's AG said his office is making progress on recovering from a ransomware attack discovered three weeks ago Some judges are giving extensions to lawyers and prosecutors due to the cyberattack therecord.media/pennsylvania...

CISA touted its work helping Nevada deal with the statewide impact of a probable ransomware attack following complaints last month from Arizona about a lack of assistance therecord.media/cisa-steps-n...

Microsoft warns of ransomware gang shifting to steal cloud data, lock companies out of systems Via @jgreig.bsky.social & @therecordmedia.bsky.social

i find this image so fascinating. it is both a literal example of authoritarianism but also a second-hand reproduction of the aesthetics of other authoritarian states. it's like a simulacra of authoritarianism whose purpose is to attempt to make the simulacra real.

US Treasury sanctioned a Russian national people and Chinese company for their role in the North Korean IT worker scheme therecord.media/us-sanctions...

The DOGE team at SSA might have violated FISMA and other laws by not following security protocols as spelled out in NIST's SP 800-53, which are mandatory for all government agencies. 1/2 www.csoonline.com/article/4046...

Mariam Abu Dagga, a Palestinian journalist whose photos captured the destruction in Gaza, died in an Israeli strike on Gaza's Nasser Hospital, the one she regularly documented. Here are some of the scenes Dagga captured during the war:

Farmers Insurance says 1 million customers affected by cyberattack on third-party vendor via @jgreig.bsky.social & @therecordmedia.bsky.social

A cyberattack took down systems, websites and phone lines used by the state government of Nevada after an incident on Sunday morning The attack took place one day after hackers targeted state systems in Maryland therecord.media/nevada-state...

Ransomware gang claims attack on St. Paul city government Via @jgreig.bsky.social & @therecordmedia.bsky.social

This is great work! And every scammer caught is a good thing. But, to show the enormity of the problem, that $100 Million spread over 7 years means they accounted for less than .08% of attacks in the US alone. We have a long way to go. via @jgreig.bsky.social & @therecordmedia.bsky.social

Good on the DEF CON volunteers, this is amazing work. But also, we shouldn’t have to rely on volunteers to secure our water infrastructure. via @jgreig.bsky.social & @therecordmedia.bsky.social

They were also hacked last June for $55mil www.halborn.com/blog/post/ex...

FB-ISAO: 01 January to 30 June 2025: - 36 orgs victims of #ransomware - 15 churches - 5 #faith based schools faithbased-isao.org/ransomware-i... cc @maggiemiller.bsky.social @campuscodi.risky.biz @jgreig.bsky.social @ransomwaresommelier.com @cocaman.ch @ecrime.ch @gate15.bsky.social #cybersecurity

PipeMagic is also the name of @andyjabbour.bsky.social’s favorite Vape Shop 🤣 via @jgreig.bsky.social & @therecordmedia.bsky.social

Personally, I think each of these bastards arrested need to pay ME restitution for the hours of sleep I’ve lost dealing with their BS. via @jgreig.bsky.social & @therecordmedia.bsky.social

Hackers shut down Maryland state-level systems that organize transportation for the disabled Add this one to @ransomwaresommelier.com 's "some hackers need to face the wrath of a drone" list therecord.media/maryland-cyb...

CISA warned of a zero-day that Apple said "may have been exploited in an extremely sophisticated attack against specific targeted individuals.” CVE-2025-43300 "is a zero-click exploit that requires no user interaction," said Qualys' Mayuresh Dani therecord.media/cisa-warns-o...

Automotive electronics manufacturer Data I/O said a ransomware attack has shut down the technology used for shipping, manufacturing, production and other support functions therecord.media/electronics-...

Davis Lu, a 55-year-old Houston resident, was given a four-year sentence for trying to destroy the systems of his employer after he found out he was being fired therecord.media/chinese-nati...

An Indiana-based drug research company said a recent ransomware attack has disrupted its business operations and forced a shutdown of critical systems Qilin threat actors took credit for the attack on Tuesday morning therecord.media/drug-develop...

Sanctions on Russian cryptocurrency exchange Garantex were renewed on Thursday by US officials who said the platform has directly helped ransomware gangs and cybercriminals launder more than $100 million since 2019 therecord.media/treasury-dep...

A popular cryptocurrency platform in Turkey temporarily suspended deposits and withdrawals after security firms tracked $49 million worth of coins leaving the platform in transactions on Thursday morning therecord.media/turkish-cryp...

New York is taking over CFPB's now abandoned lawsuit against #Zelle for allegedly not doing anything to stop $1 billion in scams from proliferating on the platform therecord.media/zelle-lawsui...

The office of Pennsylvania's attorney general is warning state residents that its email and phone lines are down as a result of a cyberattack Experts traced the breach back to the CitrixBleed 2 bug therecord.media/pennsylvania...

Spoke with DEFCON Franklin about their incredible work helping water utilities with cyber If you have cyber experience and want to volunteer to help a local water utility, reach out to them! therecord.media/def-con-fran...

US agencies confirmed the takedown of BlackSuit ransomware infrastructure two weeks after the gang's leak site went dark The gang attacked more than 450 entities in the US and secured more than $370 million in ransom payments, US investigators said therecord.media/us-confirms-...

Nearly 900,000 people had SSNs and other info stolen by the hackers who attacked Columbia University in June therecord.media/columbia-uni...

CISA pledged to continue supporting the CVE Program in the future after the funding fiasco in April #BlackHat2025 therecord.media/cisa-pledges...

#SonicWall updated its advisory on the recent campaign against its firewalls, claiming the incidents are likely tied to the exploitation of CVE-2024-40766 and not a new bug They are investigating about 40 incidents therecord.media/sonicwall-po...

CISA warned last night about CVE-2025-53786, another Microsoft Exchange bug Microsoft said it had not seen exploitation of the bug as of Wednesday Strange case. Microsoft made it seem like this is impossible to use, CISA has its hair on fire about it. Who is right? therecord.media/microsoft-ex...