serisec

Category: Government

  • Welcoming the Philippine Government to Have I Been Pwned

    Welcoming the Philippine Government to Have I Been Pwned Today, we welcome the 46th government onboarded to Have I Been Pwned’s free gov service: the Philippines. The Philippines’ National CERT, working with the Department of Information and Communications Technology, now has access to monitor official government domains against the data in HIBP. This gives their…

  • Welcoming the Bhutanese Government to Have I Been Pwned

    Welcoming the Bhutanese Government to Have I Been Pwned Today, we welcome the 45th government onboarded to Have I Been Pwned’s free gov service: Bhutan. The Bhutan Computer Incident Response Team, BtCIRT, now has access to monitor Bhutanese government domains against the data in HIBP. As Bhutan’s national CIRT, BtCIRT is responsible for consuming threat…

  • Welcoming the Bahamian Government to Have I Been Pwned

    Welcoming the Bahamian Government to Have I Been Pwned Today, we welcome the 44th government onboarded to Have I Been Pwned’s free gov service: The Bahamas. The National Computer Incident Response Team of The Bahamas, CIRT-BS, now has access to monitor government domains against the data in HIBP. As the national CIRT, CIRT-BS is responsible…

  • GM agrees to $12.75M California settlement over sale of drivers’ data

    GM agrees to $12.75M California settlement over sale of drivers’ data California Attorney General Rob Bonta announced a proposed $12.75 million settlement agreement with General Motors (GM) over allegations that the company violated the California Consumer Privacy Act (CCPA). […] Bill Toulas Go to bleepingcomputer

  • Welcoming the Bangladesh Government to Have I Been Pwned

    Welcoming the Bangladesh Government to Have I Been Pwned Today, we welcome the 43rd government onboarded to Have I Been Pwned’s free gov service, Bangladesh. The BGD e-GOV CIRT department now has full access to query all their government domains via API, and monitor them against future breaches. Bangladesh joins a growing list of national…

  • Welcoming the Costa Rican Government to Have I Been Pwned

    Welcoming the Costa Rican Government to Have I Been Pwned Today, we welcome the 42nd government onboarded to Have I Been Pwned’s free gov service: Costa Rica. The CSIRT of the Government of Costa Rica now has access to monitor government domains against the data in HIBP. This enables their national cybersecurity incident response team…

  • French govt agency confirms breach as hacker offers to sell data

    French govt agency confirms breach as hacker offers to sell data France Titres, the government agency in France for issuing and managince administrative documents has disclosed a data breach after a threat actor claimed the attack and stealing citizen data. […] Bill Toulas Go to bleepingcomputer

  • Hackers exploit TrueConf zero-day to push malicious software updates

    Hackers exploit TrueConf zero-day to push malicious software updates Hackers have targeted TrueConf conference servers in attacks that exploit a zero-day vulnerability, allowing them to execute arbitrary files on all connected endpoints. […] Bill Toulas Go to bleepingcomputer

  • Iranian hackers breach FBI director’s personal email, and post his CV and photos online

    Iranian hackers breach FBI director’s personal email, and post his CV and photos online It’s not every day that you read that the head of America’s top law enforcement agency has been hacked, but then – these aren’t ordinary times. Read more in my article on the Hot for Security blog. Graham Cluley Go to…

  • FCC bans new routers made outside the USA over security risks

    FCC bans new routers made outside the USA over security risks The Federal Communications Commission has updated its Covered List to include all consumer routers made in foreign countries, banning the sale of new models in the U.S. […] Bill Toulas Go to bleepingcomputer

  • Chinese cyberspies breached dozens of telecom firms, govt agencies

    Chinese cyberspies breached dozens of telecom firms, govt agencies Google’s Threat Intelligence Group (GTIG), Mandiant, and partners disrupted a global espionage campaign attributed to a suspected Chinese threat actor that used SaaS API calls to hide malicious traffic in attacks targeting telecom and government networks. […] Bill Toulas Go to bleepingcomputer

  • Spain’s Ministry of Science shuts down systems after breach claims

    Spain’s Ministry of Science shuts down systems after breach claims Spain’s Ministry of Science (Ministerio de Ciencia) announced a partial shutdown of its IT systems, affecting several citizen- and company-facing services. […] Bill Toulas Go to bleepingcomputer

  • Smashing Security podcast #453: The Epstein Files didn’t hide this hacker very well

    Smashing Security podcast #453: The Epstein Files didn’t hide this hacker very well Supposedly redacted Jeffrey Epstein files can still reveal exactly who they’re talking about – especially when AI, LinkedIn, and a few biographical breadcrumbs do the heavy lifting. Sloppy redaction leads to explosive claims, and difficult reputational consequences for cybersecurity vendors, and we…

  • Taiwan says China’s attacks on its energy sector increased tenfold

    Taiwan says China’s attacks on its energy sector increased tenfold The National Security Bureau in Taiwan says that China’s attacks on the country’s energy sector increased tenfold in 2025 compared to the previous year. […] Bill Toulas Go to bleepingcomputer

  • Multiple London councils’ IT systems disrupted by cyberattack

    Multiple London councils’ IT systems disrupted by cyberattack The Royal Borough of Kensington and Chelsea (RBKC) and the Westminster City Council (WCC) announced that they are experiencing service disruptions following a cybersecurity issue. […] Bill Toulas Go to bleepingcomputer

  • U.S. Congressional Budget Office hit by suspected foreign cyberattack

    U.S. Congressional Budget Office hit by suspected foreign cyberattack The U.S. Congressional Budget Office (CBO) confirms it suffered a cybersecurity incident after a suspected foreign hacker breached its network, potentially exposing sensitive data. […] Lawrence Abrams Go to bleepingcomputer

  • How a ransomware gang encrypted Nevada government’s systems

    How a ransomware gang encrypted Nevada government’s systems The State of Nevada has completed its recovery from a ransomware attack it suffered on August 24, 2025, which impacted 60 state agencies, disrupting critical services related to health and public safety. […] Bill Toulas Go to bleepingcomputer

  • Canada says hacktivists breached water and energy facilities

    Canada says hacktivists breached water and energy facilities The Canadian Centre for Cyber Security warned today that hacktivists have breached critical infrastructure systems multiple times across the country, allowing them to modify industrial controls that could have led to dangerous conditions. […] Bill Toulas Go to bleepingcomputer

  • Python rejects $1.5M grant from U.S. govt. fearing ethical compromise

    Python rejects $1.5M grant from U.S. govt. fearing ethical compromise The Python Software Foundation (PSF) has withdrawn its $1.5 million grant proposal to the U.S. National Science Foundation (NSF) due to funding terms forcing a compromise on its commitment to diversity, equity, and inclusion.. […] Bill Toulas Go to bleepingcomputer

  • Welcoming CERN to Have I Been Pwned

    Welcoming CERN to Have I Been Pwned It’s hard to explain the significance of CERN. It’s the birthplace of the World Wide Web and the home of the largest machine ever built, the Large Hadron Collider. The bit that’s hard to explain is, well, I mean, look at it! Charlotte and I visited CERN in…

  • US investors to take over TikTok operations in the country

    US investors to take over TikTok operations in the country U.S. President Donald Trump has signed an executive order approving a plan to restructure TikTok operations in the country to address national security concerns. […] Bill Toulas Go to bleepingcomputer

  • Panama Ministry of Economy discloses breach claimed by INC ransomware

    Panama Ministry of Economy discloses breach claimed by INC ransomware Panama’s Ministry of Economy and Finance (MEF) has disclosed that one of its computers may have been compromised in a cyberattack.. […] Bill Toulas Go to bleepingcomputer

  • Czech cyber agency warns against Chinese tech in critical infrastructure

    Czech cyber agency warns against Chinese tech in critical infrastructure The Czech Republic’s National Cyber and Information Security Agency (NUKIB) is instructing critical infrastructure organizations in the country to avoid using Chinese technology or transferring user data to servers located in China. […] Bill Toulas Go to bleepingcomputer

  • Spain arrests hackers who targeted politicians and journalists

    Spain arrests hackers who targeted politicians and journalists The Spanish police have arrested two individuals in the province of Las Palmas for their alleged involvement in cybercriminal activity, including data theft from the country’s government. […] Bill Toulas Go to bleepingcomputer

  • Switzerland says government data stolen in ransomware attack

    Switzerland says government data stolen in ransomware attack The government in Switzerland is informing that sensitive information from various federal offices has been impacted by a ransomware attack at the third-party organization Radix. […] Bill Toulas Go to bleepingcomputer

  • Russia’s throttling of Cloudflare makes sites inaccessible

    Russia’s throttling of Cloudflare makes sites inaccessible Starting June 9, 2025, Russian internet service providers (ISPs) have begun throttling access to websites and services protected by Cloudflare, an American internet giant. […] Bill Toulas Go to bleepingcomputer

  • Oxford City Council suffers breach exposing two decades of data

    Oxford City Council suffers breach exposing two decades of data Oxford City Council warns it suffered a data breach where attackers accessed personally identifiable information from legacy systems. […] Bill Toulas Go to bleepingcomputer

  • Welcoming the Malaysian Government to Have I Been Pwned

    Welcoming the Malaysian Government to Have I Been Pwned Today, we welcome the 40th government onboarded to Have I Been Pwned’s free gov service, Malaysia. The NC4 NACSA (National Cyber Coordination and Command Centre of the National Cyber Security Agency) in Malaysia now has full access to query all their government domains via API, and…

  • Welcoming the Isle of Man Government to Have I Been Pwned

    Welcoming the Isle of Man Government to Have I Been Pwned Today we welcome the 39th government and first self-governing British Crown Dependency to Have I Been Pwned, The Isle of Man. Their Office of Cyber-Security & Information Assurance (OCSIA) now has free and open access to query the government domains of their jurisdiction. We’re…

  • Pro-Russia hacktivists bombard Dutch public orgs with DDoS attacks

    Pro-Russia hacktivists bombard Dutch public orgs with DDoS attacks Russia-aligned hacktivists persistently target key public and private organizations in the Netherlands with distributed denial of service (DDoS) attacks, causing access problems and service disruptions. […] Bill Toulas Go to bleepingcomputer

  • Welcoming The Gambia National CSIRT to Have I Been Pwned

    Welcoming The Gambia National CSIRT to Have I Been Pwned Today, we’re happy to welcome the Gambia National CSIRT to Have I Been Pwned as the 38th government to be onboarded with full and free access to their government domains. We’ve been offering this service for seven years now, and it enables national CSIRTs to…

  • DHS says CISA will not stop monitoring Russian cyber threats

    DHS says CISA will not stop monitoring Russian cyber threats The US Cybersecurity and Infrastructure Security Agency says that media reports about it being directed to no longer follow or report on Russian cyber activity are untrue, and its mission remains unchanged. […] Lawrence Abrams Go to bleepingcomputer

  • Australia bans all Kaspersky products on government systems

    Australia bans all Kaspersky products on government systems The Australian government has banned all Kaspersky Lab products and web services from its systems and devices following an analysis that claims the company poses a significant security risk to the country. […] Bill Toulas Go to bleepingcomputer

  • Smashing Security podcast #401: Hacks on the high seas, and how your home can be stolen under your nose

    Smashing Security podcast #401: Hacks on the high seas, and how your home can be stolen under your nose An Italian hacker makes the grade and ends up in choppy waters, and hear true stories of title deed transfer scams. All this and more is discussed in the latest edition of the award-winning “Smashing Security”…

  • FTC cracks down on Genshin Impact gacha loot box practices

    FTC cracks down on Genshin Impact gacha loot box practices Genshin Impact developer Cognosphere (aka Hoyoverse) has agreed to a $20 million settlement with the U.S. Federal Trade Commission (FTC) over its gacha loot box monetization and is now banned from selling them to teens under the age of sixteen without parental consent. […] Lawrence Abrams…

  • Scammers file first — Get your IRS Identity Protection PIN now

    Scammers file first — Get your IRS Identity Protection PIN now The IRS relaunched its Identity Protection Personal Identification Number (IP PIN) program this week and all US taxpayers are encouraged to enroll for added security against identity theft and fraudulent returns. […] Lawrence Abrams Go to bleepingcomputer

  • Wyden proposes bill to secure US telecoms after Salt Typhoon hacks

    Wyden proposes bill to secure US telecoms after Salt Typhoon hacks U.S. Senator Ron Wyden of Oregon announced a new bill to secure the networks of American telecommunications companies breached by Salt Typhoon Chinese state hackers earlier this year. […] Sergiu Gatlan Go to bleepingcomputer

  • Welcoming the Armenian Government to Have I Been Pwned

    Welcoming the Armenian Government to Have I Been Pwned Today, we’re happy to welcome the 37th government to have full and free access to domain searches of their gov domains in Have I Been Pwned, Armenia. Armenia’s National Computer Incident Response Team AM-CERT now joins three dozen other national counterparts in gaining visibility into how…