The U.S. sanctioned a Chinese cybersecurity company and one of its employees for exploiting a zero-day vulnerability in Sophos firewalls to target U.S. organizations.
On Tuesday, the U.S. Treasury Department said Guan Tianfeng, an employee of Sichuan Silence, used the vulnerability to compromise approximately 81,000 firewalls in April 2020. The hacking campaign, detailed by Sophos in November, led to the compromise of more than 23,000 firewalls in the U.S., dozens of which were used at a government agency, and critical infrastructure companies. One of these was an energy company involved in drilling operations. The Treasury noted that the incident could have caused “significant loss in human life” if the attack had been successful.
Read more…
Source: TechCrunch
Related:
- US looking at media report that Israel used AI to identify bombing targets in Gaza
April 5, 2024
The United States was looking into a media report that the Israeli military has been using artificial intelligence to help identify bombing targets in Gaza, White House national security spokesperson John Kirby told CNN in an interview on Thursday. The report in +972 Magazine and Local Call was published on Wednesday. According to the 972+ report, ...
- Why the threat of a ‘nightmare’ Chinese supercomputer just got a step closer
April 4, 2024
A cyber security official at the US State Department had noticed something unusual. An internal IT security system, nicknamed “Big Yellow Taxi”, had flagged unusual activity on its corporate Microsoft account. The tech team quickly raised its concerns to Microsoft, hopeful that the alert was just a false positive. What rapidly emerged, however, was that a ...
- US and UK announce landmark agreement on artificial intelligence safety
April 2, 2024
The UK and US have signed a landmark deal to work together on testing advanced artificial intelligence (AI). The agreement signed on Monday says both countries will work together on developing “robust” methods for evaluating the safety of AI tools and the systems that underpin them. It is the first bilateral agreement of its kind. Read more… Source: ...
- Pentagon Creates Office of the Assistant Secretary of Defense for Cyber Policy
April 1, 2024
On March 21, President Joe Biden nominated Michael Sulmeyer, principal cyber adviser to the secretary of the Army, to serve as assistant secretary of defense for cyber policy, or ASD(CP). Ashley Manning, a career member of the Senior Executive Service, is currently performing the duties of ASD(CP). According to the department, the ASD(CP) will oversee and certify ...
- Funding delivered to upgrade Fort Eisenhower’s Cyber Center of Excellence
April 1, 2024
U.S. Senator Jon Ossoff is delivering $163 million in funding to upgrade Fort Eisenhower’s Cyber Center of Excellence. The funding comes after the Ft. Eisenhower Cyber Center Enhancement Act through the FY24 National Defense Authorization Act was passed, which authorized the construction of new classrooms at the Cyber Center of Excellence. Ossoff’s team says the funding ...
- AT&T data breach: Millions of customers’ data found on dark web
March 30, 2024
AT&T announced on Saturday it is investigating a data breach involving the personal information of more than 70 million current and former customers leaked on the dark web. According to information about the breach on the company’s website, 7.6 million current account holders and 65.4 million former account holders have been impacted. An AT&T press release ...