Latest Government news

US federal payroll agency hacked using SolarWinds software flaw

The FBI has discovered that the National Finance Center (NFC), a U.S. Department of Agriculture (USDA) federal payroll agency, was compromised by exploiting a SolarWinds Orion software flaw, according to a Reuters report.
- Sergiu Gatlan
- February 02, 2021
- 04:39 PM
- 0
US govt: Number of identity theft reports doubled last year

The U.S. Federal Trade Commission (FTC) said today that the number of identity theft reports has doubled during 2020 when compared to 2019, reaching a record 1.4 million reports within a single year.
- Sergiu Gatlan
- February 01, 2021
- 03:10 PM
- 1
Undisclosed Apache Velocity XSS vulnerability impacts GOV sites

An undisclosed XSS vulnerability in Apache Velocity Tools can be exploited by unauthenticated attackers to target government sites, including NASA and NOAA.
- Ax Sharma
- January 15, 2021
- 05:05 AM
- 0
United Nations data breach exposed over 100k UNEP staff records

This week, researchers have responsibly disclosed a vulnerability by exploiting which they could access over 100K private records of United Nations Environmental Programme (UNEP). The data breach stemmed from exposed Git directories which let researchers clone Git repositories and gather PII of a large number of employees.
- Ax Sharma
- January 11, 2021
- 01:52 AM
- 5
CISA: Hackers breached US govt using more than SolarWinds backdoor

The US Cybersecurity and Infrastructure Security Agency (CISA) said that the APT group behind the recent compromise campaign targeting US government agencies used more than one initial access vector.
- Sergiu Gatlan
- December 17, 2020
- 12:48 PM
- 1
FBI, CISA officially confirm US govt hacks after SolarWinds breach

The compromise of multiple US federal networks following the SolarWinds breach was officially confirmed for the first time in a joint statement released earlier today by the FBI, DHS-CISA, and the Office of the Director of National Intelligence (ODNI).
- Sergiu Gatlan
- December 17, 2020
- 09:39 AM
- 0
US govt, FireEye breached after SolarWinds supply-chain attack

Trojanized versions of SolarWinds' Orion IT monitoring and management software have been used in a supply chain attack leading to the breach of government and high-profile companies after attackers deployed a backdoor dubbed SUNBURST or Solorigate.
- Sergiu Gatlan
- December 14, 2020
- 10:04 AM
- 3
Microsoft announces Azure cloud for top secret government data

Microsoft today announced the launch of a new offering for its mission-critical Azure Government cloud targeted at government customers and partners that regularly work with top-secret classified data.
- Sergiu Gatlan
- December 07, 2020
- 11:30 AM
- 0
HMRC phishing scam abuses mail service to bypass spam filters

Threat actors are exploiting legitimate SendGrid mailing service to send HMRC phishing emails that bypass spam filters.
- Ax Sharma
- December 02, 2020
- 05:10 PM
- 0
Hacker posts exploits for over 49,000 vulnerable Fortinet VPNs

Thousands of domains, including those belonging to high street banks and government organizations are vulnerable to a critical Path Traversal flaw in Fortinet SSL VPN.
- Ax Sharma
- November 22, 2020
- 11:40 AM
- 0
Joe Biden's 'Vote Joe' website defaced by Turkish Hackers

The Vote Joe site set up by Biden Presidential campaign was hacked this week and defaced by a Turkish group called RootAyyıldız. The defacement appears to have lasted for over 24 hours.
- Ax Sharma
- November 21, 2020
- 09:22 AM
- 1
HMRC smishing tax scam targets UK banking customers

An advanced HMRC tax rebate scam has been targeting UK residents this week via text messages (SMS). The smishing campaign is concerning as it employs multiple HMRC phishing domains and tactics, with new domains being added every day as older ones get flagged by spam filters.
- Ax Sharma
- November 08, 2020
- 01:10 PM
- 0
Russian Turla hackers breach European government organization

Russian-speaking hacking group Turla has hacked into the systems of an undisclosed European government organization according to a new Accenture Cyber Threat Intelligence (ACTI) report.
- Sergiu Gatlan
- October 28, 2020
- 02:46 PM
- 0
Russian state hackers stole data from US government networks

DHS Cybersecurity and Infrastructure Security Agency (CISA) and the FBI today warned that a Russian state-sponsored APT threat group known as Energetic Bear has hacked and stolen data from US government networks during the last two months.
- Sergiu Gatlan
- October 22, 2020
- 03:55 PM
- 0
Russian hackers use fake NATO training docs to breach govt networks

Russian cyber espionage group known by names, Fancy Bear and APT28 has been behind a targeted attack campaign aimed at government bodies. The group delivers a hard-to-detect strand of Zebrocy Delphi malware under the pretense of providing NATO training materials.
- Ax Sharma
- September 22, 2020
- 10:15 AM
- 0
US 2020 Presidential apps riddled with tracking and security flaws

Vote Joe app is the official app designed for engaging voters as a part of the Biden 2020 Presidential campaign. The app's API was found to be leaking data on a voter's political affiliations as predicted by Target Smart .
- Ax Sharma
- September 17, 2020
- 10:12 AM
- 1
Hacked government, college sites push malware via fake hacking tools

A large scale hacking campaign is targeting governments and university websites to host articles on hacking social network accounts that lead to malware and scams.
- Lawrence Abrams
- August 10, 2020
- 12:48 PM
- 8
US government sites abused to redirect users to porn sites

In an ongoing blackhat SEO campaign tracked by BleepingComputer, scammers are using open redirects found on government websites to redirect visitors to pornography sites.
- Lawrence Abrams
- July 31, 2020
- 04:34 PM
- 0
Thousands of Roblox accounts hacked in support of Trump reelection

A hacking campaign is targeting Roblox accounts to support President Trump in the upcoming U.S. Presidential elections in November.
- Lawrence Abrams
- June 29, 2020
- 01:00 PM
- 6
US govt to enforce HTTPS on new .gov sites starting September 1

Starting September 1, 2020, new .gov sites will only be accessible via HTTPS as they will automatically be preloaded according to an announcement made by the U.S. Government's DotGov Program today.
- Sergiu Gatlan
- June 22, 2020
- 01:26 PM
- 0