Cybersecurity
PHP flaws draw millions of hacking attempts amid global push for fixes
Cloudflare reported millions of attempts to exploit the widely used web software, while researchers warned that compromised sites could also put visitors at risk.
Russia targets Democrats and Ukraine supporters ahead of midterms, top intel lawmakers say
Sen. Mark Warner, D-Va., and Rep. Jim Himes, D-Conn., described Russian disinformation and more targeted Chinese influence efforts during a press roundtable, while reporting better access under intelligence chief Jay Clayton.
US agencies urge fixes for programming language flaws putting millions of web systems at risk
The flaws in the widely used website software known as PHP could expose data and let hackers seize control.
Democrats warn tech firms of election security ‘backsliding’ ahead of midterms
Senior intelligence and election oversight lawmakers want social media companies and AI developers to strengthen safeguards against false voting information, foreign influence campaigns and deceptive AI content.
Exclusive
Senator warns hundreds of federal web addresses may lack key spying protection
The list includes websites for FBI tips, intelligence job applications and the Veterans Crisis Line.
US moves to staff leaders for industry-partnered offensive cyber program
The Trump administration is laying groundwork to enlist companies against foreign cybercriminals, but payment arrangements and protections for participating firms remain unresolved.
Officials see gaps in election communications as AI makes foreign influence easier
Sources describe weakening cooperation between the federal government and state and industry partners ahead of the midterms, as AI gives foreign operatives cheaper ways to produce and spread deceptive messages.
Exclusive
Top Pentagon zero trust official to retire from government this week
Randy Resnick has spent nearly 40 years in federal service and is expected to continue working at a software company as a chief technology officer for government.
FBI disrupts North Korean ‘laptop farm’ used to infiltrate US companies
Agents seized nearly 190 laptops across Texas in a crackdown on fraudulent remote workers whose earnings help fund Pyongyang’s weapons programs.
Cybersecurity executive who helped hacking victims arrested on federal extortion charges
Ed Dubrovsky’s arrest may be linked to the FBI’s investigation into ShinyHunters. He has built a career advising organizations on cyberattacks and ransom demands.
FBI arrests another ShinyHunters suspect after massive breach of employee data
The arrest follows action against suspected members in Jordan and the Netherlands as the bureau investigates the theft of its sensitive personnel information.
Exclusive
Watchdog to examine summertime hack of DHS information network, other incidents
The Government Accountability Office is expected to flag that DHS delayed in notifying Congress of the incidents, according to a person familiar with the review.
FBI seizes websites supporting Chinese contractor’s hacking operations
U.S. agencies targeted tools used to find security weaknesses and break into networks, warning of threats to critical infrastructure.
Recent Taiwan simulation highlights US cyberdefense gaps against China, experts warn
Organizers of a cyber conflict exercise say Washington needs to prepare for attacks that both disrupt civilian services and pressure Taipei without triggering outright military conflict.
The monsters of Cybersecurity Awareness Month are getting stronger
Familiar threats like phishing and ransomware have not gone away, but NIST’s 2026 Cybersecurity Awareness Month activities are increasingly confronting newer risks involving AI agents, secure software development and digital identity.
FBI removes Accenture contractor after missed security patch led to breach
The bureau’s cyber chief blamed a contractor’s failure to apply an available fix for an intrusion that may have exposed sensitive employee information.
Pentagon personnel breach — undetected for months — renews cyber standard scrutiny
Unauthorized users accessed sensitive records for roughly nine months before discovery, exposing another government personnel data fiasco as the FBI confronts its own breach incident.
China-linked hackers posed as former US officials, Anthropic employee to target AI experts
Proofpoint identified phishing campaigns that borrowed prominent figures’ identities to approach U.S. policy researchers before attempting to steal access to their cloud accounts.
Renewed CISA support comes too late for midterm prep, some election officials say
Arizona still plans to accept federal help on Election Day, while officials warn that staffing cuts have weakened relationships and left smaller jurisdictions with fewer resources.
FBI warns ShinyHunters members to come forward after alleged leader’s arrest
“You know how to find us, and we know how to find you,” said Brett Leatherman, assistant director of the FBI’s Cyber Division. “I suggest you reach out first while the choice is still yours.”
