The rules have already been rejected by multiple state courts, but the Trump administration said it’s preparing in case of a favorable Supreme Court decision. The post Postal Service moves to finalize mail ballot regs before SCOTUS ruling appeared first on CyberScoop.
TikTok has agreed to pay $400 million to settle a U.S. Department of Justice lawsuit alleging violations of child privacy laws, with $300 million due immediately and the remaining $100 million conditional on vacating a prior consent decree. The settlement resolves claims brought against ByteDance's social media platform in 2024 for its handling of children's personal data.
Lawmakers say little is known about how recent cuts have impacted CISA and how the knowledge that was lost has been replaced.
Sen. Ron Wyden and Rep. Greg Casar want a GAO probe on the government’s use of spyware and other sophisticated hacking tools and authorities. The post Lawmakers seek watchdog review of federal hacking of Americans appeared first on CyberScoop.
A “confidence disconnect” is plaguing the industry, a consulting firm said.
Government agencies with smaller budgets need support — and here's how you can help.
The coming threat of super-powerful computers capable of cracking today’s algorithms requires upgrading encryption now. Tech companies have begun building defenses.
Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base. The post Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind appeared first on SecurityWeek.
Nearly half of enterprises lack designated leadership for post-quantum cryptography migration efforts, despite believing they are adequately prepared for quantum computing threats, according to research from Axiad. The study reveals significant gaps in organizational readiness, including deficiencies in ownership structure, testing capabilities, and visibility into cryptographic assets—areas critical to successfully transitioning to PQC implementations. While 75% of respondents reported maintaining updated inventories of certificates and cryptographic keys, the absence of clear migration leadership suggests many organizations may struggle to execute their transition strategies effectively.
In every MFA rollout, there will come a time where you think you are closing in on "done", and some automation to list what&#;x26;#;39;s left would be handy. Something quicker than scrolling through the web interface through thousands of accounts ...
One thing that folks never seem to do after "going to the CLOOOOUUUUD" is to look at their logs, logs that they would have checked daily when things were on premise.
Law enforcement training is falling behind the volume and rapid evolution of cybercrimes. Officers really only need to learn the basics, but lack of focus and budget hinder progress.
The Combating Organized Retail Crime Act has won a big House vote and could be on the fast track in the Senate — and supporters say it could help fight cybercrime. The post Retail theft bill spurs ‘very large and very dangerous’ surveillance fears appeared first on CyberScoop.
Resilience, not prevention, is key, analysts at the credit-rating agency said in a pair of new reports.
The designation would unlock a range of federal services, tools and resources for an industry that policymakers view as increasingly tied to national and economic security. The post The push to designate AI as the next critical infrastructure sector appeared first on CyberScoop.
Twitch has enabled content creators to opt out of having their streams and videos used for Amazon's AI model training, following a two-year delay since the platform initially confirmed it was already conducting such training. This move provides creators with control over their intellectual property but raises questions about why the opt-out mechanism was not offered from the start of the AI training program.
Building on the last diary on Using MS Graph and Powershell, let&#;x26;#;39;s look at "Risky" logins.
Traditional vulnerability management was built for a smaller, slower problem than most teams face today. This post breaks down CTEM, why it exists, how its five stages work, and what it actually takes to move from a reactive pile of findings to a continuous, prioritized risk reduction program.
Microsoft Graph is an increasingly adopted API that enables querying and modifying information across M365, Entra users, and managed machines, presenting opportunities for both legitimate administration and reconnaissance activities. Security teams should be aware that PowerShell-based approaches using Microsoft Graph can identify organizational vulnerabilities such as stale accounts and unused licenses that may pose security risks if left unmanaged.
The UK's National Cyber Security Centre has issued guidance recommending sandboxing, oversight mechanisms, and strict access controls as essential safeguards for autonomous AI agents. These recommendations aim to mitigate security risks inherent in agentic AI systems that operate with limited human intervention.