Sign in Subscribe

cybersecurity

Massive Crime Stoppers data breach may expose millions of anonymous tipsters

Massive Crime Stoppers data breach may expose millions of anonymous tipsters

A hacktivist group calling itself the Internet Yiff Machine claims to have exfiltrated 93 gigabytes of data—roughly 8.3 million anonymous tips—from P3 Global Intel, the cloud-based tip management platform used by Crime Stoppers programs, law enforcement agencies, and more than 35,000 schools nationwide. P3, a unit

NPM hack shows stakes of open‑source supply chainsA

NPM hack shows stakes of open‑source supply chainsA

A large-scale breach of the NPM software registry on 8 September 2025 underscores how a single compromised account can ripple through government and private sector IT. NPM—the official repository for JavaScript packages at npmjs.com—is best understood as a public library of reusable code “building blocks” that developers

Horizon cutting-room links: Wednesday, 6 August 2025

Horizon cutting-room links: Wednesday, 6 August 2025

"Grand odyssey of CMMC nearing implementation," Federal News Network The Cybersecurity Maturity Model Certification (CMMC) is on the verge of becoming a reality; the Cyber Accreditation Body is scaling up assessors to meet the anticipated demand. * Final rule submission: DOD submitted the final CMMC acquisition rule to the

Bad actors threaten to weaponize open source software

Bad actors threaten to weaponize open source software

A recent report by Strider Technologies, reported by Defense One, describes how state-sponsored hackers from China, Russia, and North Korea are contributing to widely used open-source software. By injecting vulnerabilities and backdoors into the open-source projects that are built into digital infrastructure, these actors can potentially exfiltrate sensitive data or

Microsoft SharePoint exploit hits the feds

Microsoft SharePoint exploit hits the feds

Recent cyberattacks exploiting a severe vulnerability in Microsoft's on-premise SharePoint software have affected nearly 100 organizations globally, including federal- and state-level US agencies. Investigation has tied at least some of the breach activity to a China-nexus hacking group, according to Charles Carmakal, chief technology officer at Google’s

UK retreats on Apple encryption backdoor after US pressure

UK retreats on Apple encryption backdoor after US pressure

British officials are signaling surrender on a controversial government order to compel Apple to weaken its end-to-end encryption for UK users, following warnings from top US leaders that such a move could endanger critical technology agreements between the two nations. The standoff began in January, when the UK Home Office