Cybersecurity

CISA alerts to cleartext data exposure in Johnson Controls EasyIO Neo controllers

1 min read4 days ago

Organizations using Johnson Controls EasyIO Neo EC V3.3b62/63 or CW V3.3b24/25 must address the cleartext transmission flaw disclosed on Oct. 1 2026.

Cybersecurity

CISA alerts critical vulnerabilities in Toptech TMS7 and TopHAT

1 min read6 days ago

Operators of Toptech TMS7 and TopHAT version 7.6.3 must address ten CVEs identified by CISA on Sept. 29, 2026.

Cybersecurity

CISA alerts on Baicells Nova 430H eNodeB vulnerability CVE-2026-96274

1 min read6 days ago

Operators of Baicells Nova 430H eNodeB (model pBS3101SH) running firmware BaiBLQ_3.0.12 or earlier must address the CVE-2026-96274 flaw.

Economy

Federal Reserve Highlights AI Risks at 2026 Community Bank Cyber Workshop

1 min read6 days ago

Community banks are urged to boost cyber hygiene and consider AI threats following opening remarks by Vice Chair Bowman.

Cybersecurity

GAO Report Highlights Duplicative Cybersecurity Rules Across Critical Sectors

1 min readSeptember 28, 2026

Industry leaders in energy, finance and health sectors say overlapping federal rules hinder compliance, per a July 16 2026 GAO panel.

Cybersecurity

GAO issues nine open recommendations for FAA to curb spectrum-related cyber threats

1 min readSeptember 21, 2026

The Department of Transportation has concurred with all nine GAO recommendations, which remain open pending FAA action.

Cybersecurity

CISA republishes Schneider Electric PowerChute vulnerability advisory

1 min readSeptember 17, 2026

Operators of Schneider Electric PowerChute Serial Shutdown version 1.5 or earlier must apply the vendor fix after the advisory's 2026-09-17 release.

Energy

CISA republishes advisory on Hitachi Energy FACTS Control Platform vulnerabilities

1 min readSeptember 17, 2026

Organizations using FCP versions with GWS component from 2020 onward must address nine critical CVEs effective immediately

Cybersecurity

CISA republishes advisory on GX Works3 authentication flaw

1 min readSeptember 17, 2026

All versions of Mitsubishi Electric GX Works3 and Motion Control Settings are flagged for a critical authentication bypass, effective immediately.

Health

GAO issues 10 cybersecurity recommendations for HHS 988 Lifeline

1 min readSeptember 17, 2026

The Department of Health and Human Services must adopt the GAO's recommendations to improve oversight and security controls for the 988 Suicide and Crisis Lifeline, effective immediately.

Cybersecurity

NSA, CISA, FBI issue advisory to curb China-based AI distillation attacks

1 min readSeptember 8, 2026

U.S. AI firms must adopt detection, response and intelligence-sharing measures against industrial-scale knowledge-distillation by Chinese companies, effective immediately

Cybersecurity

CISA alerts on Schneider Electric vulnerability CVE-2026-4827

1 min readSeptember 3, 2026

Owners of Schneider Electric Easergy, EcoStruxure, PowerLogic and Saitel devices must apply the supplied patch immediately to prevent session hijacking.

Cybersecurity

CISA alerts to critical ASE2000 V2 test set vulnerabilities

1 min readAugust 27, 2026

Owners of ASE2000 V2 units version 2.25-2.37 must address CVE-2018-1285 and CVE-2026-18717 as of August 27 2026.

Cybersecurity

CISA alerts hard-coded credential flaw in Furuno FA-50 AIS transponders

1 min readAugust 25, 2026

All versions of Furuno's FA-50 Class B AIS transponder are vulnerable to CVE-2026-59769 as of the advisory issued 25 August 2026.

Cybersecurity

CISA advisory highlights detection gaps after dual red-team assessments

1 min readAugust 25, 2026

Issued Aug. 25 2026, the advisory directs federal, state, local and critical-infrastructure entities to adopt its mitigation steps immediately.

Cybersecurity

CISA issues advisory on Johnson Controls Simplex Incident Manager credential exposure

1 min readAugust 20, 2026

The advisory, issued Aug. 20 2026, warns users of Simplex Incident Manager version 2.01 and earlier of a memory-cleartext credential risk.

Defense

President Extends National Emergency on Sensitive Tech Advancements

1 min readAugust 18, 2026

The extension applies to all U.S. investments subject to Executive Order 14105, effective August 9, 2026, for an additional year.

Elsewhere

What other outlets are reporting on this beat. We link out; we do not republish.

,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms
Healthcare organizations Clover Health Investments and AngMar Management Services are notifying more than 250,000 people that their information was stolen in separate data breaches. Jersey City, New Jersey-based Clover Health Investments was hacked in early July, after attackers used social engineering to compromise three non-managerial health plan employee accounts. The incident resulted in the theft of personally identifiable information (PII) and protected health information (PHI), the company said in an SEC filing in July. The potentially affected information included names, dates of birth, insurance identifiers, and account identification numbers, the company revealed. In mid-September, Clover Health Investments told the US Department of Health and Human Services (HHS) that 138,677 people were affected. HHS added the company to its data breaches portal last week. Mansfield, Texas-based AngMar Management Services identified suspicious activity on its systems in mid-July and confirmed in early September that hackers stole patient PII and PHI.Advertisement. Scroll to continue reading. AngMar Management Services provides business operations, administration, and support network management for home health and hospice care providers. The impacted information includes names, birth dates, Social Security numbers, diagnosis details, medical history data, health insurance information, patient IDs, provider names, prescription details, and dates of service. The Interlock ransomware group added AngMar Management Services to its Tor-based leak site in August, claiming to have stolen over 700 gigabytes of data. On September 16, the company notified HHS that 126,196 individuals were affected. The company was added to HHS’s data breach portal last week. Related: Pentagon Personnel Agency Data Breach Impacts 3 Million People Related: DC Health Agency Exposes 400,000 Beneficiary Records Related: Astrana Health Data Breach Impacts Private, Confidential Information Related: ShinyHu
SecurityWeek 4 hours ago
Pentagon personnel breach — undetected for months — renews cyber standard scrutiny
Kevin Carter/Getty Images By David DiMolfetta | October 5, 2026 10:48 AM ET Unauthorized users accessed sensitive records for roughly nine months before discovery, exposing another government personnel data fiasco as the FBI confronts its own breach incident. Defense Workforce Data Breaches Cyber Threats A Pentagon breach that exposed sensitive personnel information for months before discovery is raising questions yet again about how federal agencies are able to successfully detect unauthorized access to the records they hold on millions of individuals.The incident at the Defense Manpower Data Center — which maintains personnel information used across the military and other government agencies — affected roughly 3 million people. Cybersecurity experts say it’s significant because of the risks often created when government employee personnel information is exposed for a long period of time.“Three million people may be the headline, but months of unauthorized access to highly sensitive data going undetected is the real warning,” said Nitay Milner, co-founder and CEO of data security company ORION Security.Nextgov/FCW obtained a breach notification letter signed by DMDC Director Katie Griffin, describing unauthorized access between October 2025 and July 16, 2026, when the agency discovered a vulnerability in a file-sharing system. The files contained unencrypted personal information, including Social Security numbers and, depending on the individual, names, birth dates, contact information and military occupational specialties.“Upon discovery of the security vulnerability, DMDC immediately initiated privacy and cybersecurity incident response actions in accordance with Office of the Management and Budget and [Defense] Department guidelines and policies,” it reads. “We are taking appropriate actions to assess and enhance the cybersecurity posture of the DMDC system.”DMDC patched the flaw and restored the system, according to the letter, and affected individuals are bein
Nextgov 6 hours ago
Senate Passes Bipartisan Bill to Strengthen Healthcare Cybersecurity
The US Senate has passed the bipartisan Health Care Cybersecurity and Resilience Act, introduced by Senators Bill Cassidy, Maggie Hassan, Jon Cornyn, and Mark Warner. The bill was first introduced in 2024, but failed to pass before the end of that congressional term. It was reintroduced in December 2025. Having passed the Senate by unanimous consent, the Health Care Cybersecurity and Resilience Act now heads to the US House of Representatives for consideration. “Cyberattacks on our healthcare sector not only put patients’ sensitive health data at risk but can delay life-saving care. This bipartisan legislation ensures health institutions can safeguard Americans’ health data against increasing cyber threats,” claims Cassidy. Its purpose is to assist the sector in reducing the number of future successful criminal attacks. Healthcare is a primary target for cybercriminals. More than 730 cyber breaches affected over 270 million Americans last year – costing an average of $10 million per breach. Major incidents include the historic Anthem breach of 2015 (compromising the PI and health records of 78.8 million customers, and costing more than $115 million); the ransomware attack against Ascension in 2024 (which disrupted clinical operations and electronic health records across 11 US states), and the Change Healthcare attack in 2024 that is believed to have exposed the data of over 190 million people while causing significant delays in care and electronic prescribing.Advertisement. Scroll to continue reading. The definitive criminal weapon of choice in this war against healthcare is ransomware coupled with double-extortion (and increasingly, pure data-extortion). Ransomware is devastating to healthcare. The sector is caught between government advice not to pay ransoms and its own requirement to protect its patients. Criminals expect it to pay a ransom rather than risk the health of patients. The new Act aims to help the sector improve its resilience against these attacks. “
SecurityWeek 6 hours ago
CISA Adds One Known Exploited Vulnerability to Catalog | CISA
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied. While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria. Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.
CISA advisories yesterday
ICE Is Reportedly Using A Palantir Database To Compile Dossiers On Protestors
An attorney representing protestors said this infringes on First Amendment rights. Ryan Murphy/Getty Images As revealed by unsealed court documents, Department of Homeland Security agents are allegedly creating dossiers on those that are accused of observing or protesting Immigration and Customs Enforcement agents. As first reported by Wired, these DHS files on protestors reportedly include sensitive info like photos and license plate numbers and are stored in a database built by Palantir called Investigative Case Management. The new information comes from a partially unsealed court filing about a January ICE operation that took place in Maine, according to Wired. The filing is part of a class action lawsuit, which led to a redacted version becoming available to the public on Friday and revealing the purported database of ICE protestors. According to the lawsuit, DHS agents would track and intimidate observers or protestors, sometimes by driving by their homes or labeling them as "Threat to Law Enforcement, Professional Protestor." In one example, an agent reportedly called one of the plaintiffs on her cell and suggested that she tell her spouse "not to do anything like that in the future because people who are doing things like that might get added to a domestic terrorism watchlist." The lawyers representing the plaintiffs said that this sort of database creates a chilling effect on the First Amendment rights of protestors. On the other side, a DHS spokesperson told Wired that the case was "meritless" and denied the existence of such a database that labels and tracks "domestic terrorists."
Engadget 2 days ago
California subpoenas OpenAI over rogue AI agents conducting hacking attacks — DOJ seeks to establish developer liability, targets containment failures and rogue kill-switch bypasses
The California Department of Justice (DOJ) has subpoenaed OpenAI as it investigates the recent cybersecurity incidents involving the company’s AI models and agents. According to The Register, state Attorney General Rob Bonta said that the state wants to learn more about the cybersecurity incidents involving the company and that the investigation is trying to determine the responsibility of an AI developer if an AI model or agent does something unintended.Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
Tom's Hardware 2 days ago
DHS readies major cyber contract
The Department of Homeland Security is preparing this year to award a major cloud, cybersecurity and network services contract aimed at further centralizing the management of IT services across DHS. In a notice posted to Sam.gov last month, DHS laid out the notional timeline for award of the Network, Cloud and Cybersecurity Services 2.0 vehicle, known as NCCS 2.0. The notice included a draft request for proposals and a draft statement of work. DHS plans to release the final solicitation in early October before making a final award in late November. The contract will have a $626 million ceiling, according to the draft RFP. The purpose of the contract is to allow DHS to buy “the full range of cybersecurity, network operations, management, and other professional support services” for DHS CIO’s office and select components, the draft statement of work states. “These services will enable DHS to provide network, cloud platform, system, application, and cybersecurity monitoring and analysis, incident management and coordination, and alert and notification functions in support of the broader DHS information enterprise and to provide other related cybersecurity services,” the document states. The “primary objective” of the contract is to evolve the DHS headquarters Network Operations and Service Center (NOSC) into a “best-in-class service entity that meets DHS Cybersecurity Provider (CSP) Program, industrial, and other doctrinal Center of Excellence service maturity standards.” A “secondary objective” for the contract is to redefine the NOSC as the “central hub” for managing network services, infrastructure, platforms and cybersecurity for the DHS OneNet across all classification levels, according to the draft statement of work. It states that the winning vendor will be responsible for “identifying, protecting against, detecting, responding to, and recovering from any malicious or disruptive information technology events and incidents, and ensuring that DHS OCIO is able to r
Federal News Network 3 days ago
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied. While BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria. Aware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA’s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.
CISA advisories 3 days ago

Newsletter

What the federal government did today, and what it changes - with the document behind every item.

SEC and Global Regulators Issue Joint Bulletin for World Investor Week

GAO Finds Vertically Integrated Medicare Part D Sponsors Use Own Pharmacies for 24% of Prescriptions

Commerce urged to formalize oversight of concrete masonry checkoff program

Federal Reserve publishes change-in-control notice for Shnaider Family Trust acquisition

Cybersecurity

CISA alerts to cleartext data exposure in Johnson Controls EasyIO Neo controllers

CISA alerts critical vulnerabilities in Toptech TMS7 and TopHAT

CISA alerts on Baicells Nova 430H eNodeB vulnerability CVE-2026-96274

Federal Reserve Highlights AI Risks at 2026 Community Bank Cyber Workshop

GAO Report Highlights Duplicative Cybersecurity Rules Across Critical Sectors

GAO issues nine open recommendations for FAA to curb spectrum-related cyber threats

CISA republishes Schneider Electric PowerChute vulnerability advisory

CISA republishes advisory on Hitachi Energy FACTS Control Platform vulnerabilities

CISA republishes advisory on GX Works3 authentication flaw

GAO issues 10 cybersecurity recommendations for HHS 988 Lifeline

NSA, CISA, FBI issue advisory to curb China-based AI distillation attacks

CISA alerts on Schneider Electric vulnerability CVE-2026-4827

CISA alerts to critical ASE2000 V2 test set vulnerabilities

CISA alerts hard-coded credential flaw in Furuno FA-50 AIS transponders

CISA advisory highlights detection gaps after dual red-team assessments

CISA issues advisory on Johnson Controls Simplex Incident Manager credential exposure

President Extends National Emergency on Sensitive Tech Advancements