Researchers Uncover RCE Attack Chains in HashiCorp Vault and CyberArk Conjur(csoonline.com)

17 points by GavCo 1 year ago | 2 comments

Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out(csoonline.com)

412 points by miles 2 years ago | 271 comments

CSO Online news article on a Microsoft Authenticator design flaw that overwrites existing MFA accounts when new ones are added, locking users out.

Foreign hackers breached a US nuclear weapons plant via SharePoint flaws(csoonline.com)

394 points by zdw 1 year ago | 317 comments

CSO Online news analysis reporting that foreign hackers breached the NNSA's Kansas City nuclear weapons plant by exploiting Microsoft SharePoint vulnerabilities.

Containment and monitoring failures are to blame for AI hacking reports: experts(csoonline.com)

922 points by latexr 11 days ago | 569 comments

CSO Online news analysis arguing that AI agent hacking incidents stem from frontier labs' containment and monitoring failures, not rogue agents, with advice for CISOs.

CISA tries to contain data leak(krebsonsecurity.com)

251 points by speckx 5 months ago | 55 comments

CISA Admin Leaked AWS GovCloud Keys on GitHub(krebsonsecurity.com)

433 points by LelouBil 5 months ago | 171 comments

KrebsOnSecurity article reporting that a CISA contractor kept a public GitHub repository exposing privileged AWS GovCloud credentials and internal CISA system details.

DeepSeek banned from U.S. federal civilian agencies under new DHS order(reuters.com)

547 points by cmrdporcupine 7 days ago | 496 comments

Reuters news article about a DHS order banning the Chinese AI DeepSeek from U.S. federal civilian agency IT systems; the capture shows only a device verification screen.

CVE Foundation(thecvefoundation.org)

401 points by layer8 1 year ago | 71 comments

Press release dated April 16, 2025 announcing the launch of the CVE Foundation to secure the future of the CVE vulnerability identification program.

CDC orders mass retraction and revision of submitted research(insidemedicine.substack.com)

748 points by KittenInABox 1 year ago | 513 comments

Inside Medicine Substack post by Jeremy Faust reporting that the CDC ordered retraction or revision of submitted manuscripts containing banned terms like gender and LGBT.

GSA Eliminates 18F(nextgov.com)

412 points by patcon 1 year ago | 331 comments

Nextgov/FCW news article reporting that the General Services Administration has eliminated 18F, its in-house digital services consultancy.

CFPB Opens Debanking Investigation into Nine Large National Banks(forbes.com)

22 points by iamnothere 7 days ago | 8 comments

Forbes article reporting that the CFPB has opened a debanking investigation into nine large national banks; the page showed an access-restricted error.

Police cannot seize property indefinitely after an arrest, federal court rules(reason.com)

773 points by throwup238 2 years ago | 385 comments

Reason article reporting that the D.C. Circuit ruled police cannot hold seized property indefinitely after an arrest, calling it unconstitutional.