Sign in Subscribe

cybersecurity

Horizon cutting-room links: Monday, 22 September 2025

Horizon cutting-room links: Monday, 22 September 2025

"Pentagon introduces new restrictions on reporter access," New York Times DOD implemented stringent guidelines for journalists covering military affairs, mandating that reporters pledge not to use unauthorized information under threat of losing their credentials. This move is seen as part of a broader trend under the Trump administration

NPM hack shows stakes of open‑source supply chainsA

NPM hack shows stakes of open‑source supply chainsA

A large-scale breach of the NPM software registry on 8 September 2025 underscores how a single compromised account can ripple through government and private sector IT. NPM—the official repository for JavaScript packages at npmjs.com—is best understood as a public library of reusable code “building blocks” that developers

Horizon cutting-room links: Wednesday, 6 August 2025

Horizon cutting-room links: Wednesday, 6 August 2025

"Grand odyssey of CMMC nearing implementation," Federal News Network The Cybersecurity Maturity Model Certification (CMMC) is on the verge of becoming a reality; the Cyber Accreditation Body is scaling up assessors to meet the anticipated demand. * Final rule submission: DOD submitted the final CMMC acquisition rule to the

Bad actors threaten to weaponize open source software

Bad actors threaten to weaponize open source software

A recent report by Strider Technologies, reported by Defense One, describes how state-sponsored hackers from China, Russia, and North Korea are contributing to widely used open-source software. By injecting vulnerabilities and backdoors into the open-source projects that are built into digital infrastructure, these actors can potentially exfiltrate sensitive data or

Microsoft SharePoint exploit hits the feds

Microsoft SharePoint exploit hits the feds

Recent cyberattacks exploiting a severe vulnerability in Microsoft's on-premise SharePoint software have affected nearly 100 organizations globally, including federal- and state-level US agencies. Investigation has tied at least some of the breach activity to a China-nexus hacking group, according to Charles Carmakal, chief technology officer at Google’s

UK retreats on Apple encryption backdoor after US pressure

UK retreats on Apple encryption backdoor after US pressure

British officials are signaling surrender on a controversial government order to compel Apple to weaken its end-to-end encryption for UK users, following warnings from top US leaders that such a move could endanger critical technology agreements between the two nations. The standoff began in January, when the UK Home Office