Get all your news in one place.

100's of premium titles.
One app.

Get all your news in one place.

100's of premium titles. One news app.

The Latest Breaking News from CISA

Windows Defender 'BlueHammer' vulnerability now exploited as part of malware campaigns — CISA issues warning despite patch release on April 14

Windows Defender "BlueHammer" vulnerability now exploited as part of malware campaigns — event demonstrates lack of security awareness despite existence of patches

Tom’s Hardware

Proposal to Dismantle DHS Gains Momentum as Lawmaker Says Department Has Been 'Weaponised'

Rep. Delia Ramirez is drafting legislation to dismantle the US Department of Homeland Security, aiming to protect agencies like CISA and FEMA from political influence and resource deprivation.

International Business Times UK

White House Leaves Voting Machine Report Unpublished Before US Midterm Elections

The White House has delayed publication of a federal report on US voting machine vulnerabilities, raising questions about election security, transparency and timing before the midterm elections.

International Business Times UK

From analysis to the latest developments in health,
read the most diverse news in one place.

Trump signs AI executive order seeking 30-day government access to frontier models before release — voluntary framework will include classified benchmark to determine which models qualify

President Donald Trump signed an executive order on Tuesday that asks AI companies to give the federal government early access to their most capable models.

Tom’s Hardware

Rapid7 observes new Palo Alto VPN flaw exploited in the wild to bypass GlobalProtect authentication

A flaw fixed last month is now being used in real-life attacks, and security researchers are urging users to patch.

TechRadar

CISA warns that Nx Console and GitHub repositories abused in multiple supply chain compromises – tools across enterprise, cloud, and DevOps environments exploited

The agency is giving practical advice on how to remain secure in an increasingly unsecure environment.

TechRadar

Trend Micro users beware - dangerous Apex One zero-day exploited in the wild

CISA has already added the flaw to its KEV database.

TechRadar

Read news from The Economist, FT, and more,
with one subscription

500 Poisoned Packages, Hundreds of Companies: TeamPCP's Worm Just Reached GitHub

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate approximately 3,800 of GitHub's internal source code repositories — everything from platform infrastructure to proprietary tooling built by the company that hosts more than 420 million repositories for over 180 million developers…

International Business Times

Microsoft confirms two major Defender security issues — so update now or face possible attack

CISA confirms two bugs being actively exploited in the wild, as Microsoft releases patches.

TechRadar

CISA contractor apparently leaked 'highly sensitive' government AWS keys on Github

The leak was so bad, researchers initially thought it was a joke.

TechRadar

Microsoft Exchange 0-Day Exploit Sparks Emergency Warning — Hackers Are Attacking Unpatched Servers

Microsoft Exchange Servers are under threat from a zero-day vulnerability, exploited via crafted emails. With no official patch, companies are urged to use mitigation services to protect their systems.

International Business Times UK

Iran Allegedly Breached US Gas Station Tank Readers With No Password to Stop Them

Iranian hackers infiltrated US fuel storage systems, exploiting password-free networks. This breach underscores significant cybersecurity vulnerabilities amid escalating geopolitical tensions.

International Business Times UK

More than 70,000 US Army files were exposed ‘for over a year’ even after CISA warning – sensitive personnel info and base schematics stored in vulnerable Open Directory Listing

The database contained sensitive US military information on bases, personnel, contractors, and schematics

TechRadar

'A single 732-byte Python script can be used to obtain root on essentially all Linux distributions shipped since 2017': Time to update your kernel

Batten down the distros.

PC Gamer

Get all your
news in one place.

100's of premium titles.
One news app.

Tom’s Hardware

CISA flags actively exploited ‘Copy Fail’ Linux kernel flaw enabling root takeover across major distros — unpatched systems may remain vulnerable to attack

CISA warns of the actively exploited “Copy Fail” Linux flaw (CVE-2026-31431), enabling root access, with a public exploit released before patches were ready.

PC Gamer

State cybersecurity agencies around the world are advising extra care over home routers as they could be used in 'China-nexus' covert networks

Though at least one security company thinks there are more important measures to take than those CISA suggests.

International Business Times UK

Secret Service Agent Protected President Trump Despite Unpaid Status During Record 72-Day DHS Shutdown

DHS shutdown reaches 72 days, leaving Secret Service agents who shielded Trump at WHCD and 100,000 workers facing missed pay. Speaker Johnson blocks Senate bill, prolonging the crisis.

TechRadar

New 'Firestarter' malware flames on in spite of Cisco firewall updates and security patches

Security pros are warning about custom malware targeting Cisco firewalls, and surviving upgrades and reboots.

Get all your
news in one place.

100's of premium titles.
One news app.

TechRadar

CISA puts US government agencies on two-week deadline to patch Microsoft Defender BlueHammer zero-day exploit

BlueHammer was disclosed in early April, together with two additional bugs, by a disgruntled researcher.

Axios

Scoop: Top U.S. cyber agency doesn't have access to Anthropic's powerful hacking model

CISA is not on the list of more than 40 organizations with access to Anthropic's Mythos Preview.

TechRadar

An ancient Microsoft Excel security flaw could let hackers hijack your entire system, so patch now

CISA is warning about ongoing exploitation of a 2008 bug in multiple versions of Excel.

PC Gamer

A 17-year-old Excel vulnerability is currently being exploited by threat actors, and it's been flagged by the US' cyber defence agency

The little exploit that could.

International Business Times UK

DHS Forces Staff to Return to Work Without Pay As Shutdown Continues

The Department of Homeland Security has ordered thousands of furloughed staff back to duty despite an ongoing funding lapse. A leaked memo reveals that FEMA and CISA employees must report in person or face disciplinary action.

Tom’s Hardware

US cybersecurity agency issues an urgent alert as Iranian hackers attack critical infrastructure — CISA guidance warns organizations to immediately shield certain programmable logic controllers from the internet to thwart future attacks

The U.S. Cybersecurity and Infrastructure Security Agency, in conjunction with the FBI and NSA, have issued an alert that Iranian-affiliated cyber attacks are threatening critical infrastructure, exploiting programmable logic controllers made by Rockwell Automation and Allen-Bradley to gain access.

TechRadar

Critical Citrix NetScaler flaw gets official patch warning from CISA

CISA is giving FCEB agencies a tight deadline to patch as researchers discover evidence of abuse.

1 2 3 4 5

People

From analysis to the latest developments in health,
read the most diverse news in one place.

Organisations

the Department of Homeland Security

945 stories

Read news from The Economist, FT, and more,
with one subscription

Topics

Places

Fourteen days free

Download the app

One app. One membership.
100+ trusted global sources.