Current and former administration sources say the nation-state attackers were able to read the Homeland Security Secretary's emails, among others. [...]

The post-SolarWinds EO could be issued as soon as next week, according to a report. [...]

The social-media giant took down legions of fake profiles aimed at spreading espionage malware. [...]

CEO says Apple rejected a security update needed to protect human-rights abuse evidence. [...]

A former IT contractor is facing jailtime after a retaliatory hack into a company’s network and wiping the majority of its employees’ Microsoft Office 365 accounts. [...]

The ‘young mastermind’ of the Twitter hack will serve three years in juvenile detention. [...]

A new Mimecast update reveals the SolarWinds hackers accessed several "limited" source code repositories. [...]

Researchers say China-linked APTs lure victims with bogus Huawei career pages in what they dub ‘Operation Diànxùn’. [...]

A major spike of attacks against higher ed, K-12 and seminaries in March has prompted the FBI to issue a special alert. [...]

Sky ECC claims that cops cracked a fake version of the app being passed off by disgruntled reseller. [...]

Researchers have now disclosed more information on how they were able to breach multiple websites of the Indian government. The full findings disclosed today shed light on the routes leveraged by the researchers, including finding exposed.git directories and.env files on some of these systems. [...]

At least 10 nation-state-backed groups are using the ProxyLogon exploit chain to compromise email servers, as compromises mount. [...]

The systems of SEPE, the Spanish government agency for labor, were taken down following a ransomware attack that hit more than 700 agency offices across Spain. [...]

The US Cybersecurity and Infrastructure Security Agency (CISA) is taking over the administration of the.gov top-level domain (TLD) as its new policy and management authority. [...]

Researchers with Microsoft and FireEye found three new malware families, which they said are used by the threat group behind the SolarWinds attack. [...]

Espionage attacks exploiting the just-patched remote code-execution security bugs in Microsoft Exchange servers are quickly spreading. [...]

The Department of Homeland Security's cybersecurity unit has ordered federal agencies to urgently update or disconnect Microsoft Exchange on-premises products on their networks. [...]

Full dumps of email boxes, lateral movement and backdoors characterize sophisticated attacks by a Chinese APT - while more incidents spread like wildfire. [...]

The transport system for the Australian state of New South Wales has suffered a data breach after the Clop ransomware exploited a vulnerability to steal files. [...]

Vietnam joins the ranks of governments using spyware to crack down on human-rights defenders. [...]

Millions of COVID-19 test reports were found to be publicly accessible due to flawed online system implementation. [...]

The Department of Justice (DoJ) cracked down on a Ghana-based cybercriminal enterprise behind a slew of romance scams, COVID-19 fraud attacks and business email compromise schemes since 2013. [...]

This week a report has revealed details on the two spyware strains leveraged by state-sponsored threat actors during the India-Pakistan conflict. The malware strains named Hornbill and SunBird have been delivered as fake Android apps (APKs) by the Confucius advanced persistent threat group (APT), a state-sponsored operation. [...]

The company’s controversial practice of collecting and selling billions of faceprints was dealt a heavy blow by the Privacy Commissioner that could set a precedent in other legal challenges. [...]

A second APT, potentially linked to the Chinese government, could be behind the Supernova malware. [...]