Videostrong sold TV set-top boxes and other devices with pre-installed malware. The yearslong operation evaded Google’s security tests and established a botnet for cybercriminals.

Their target for extending CISA 2015 is the annual “must-pass” defense authorization bill, but a more than year-long standoff persists.

Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed.

The 62-year-old allowed co-conspirators to use his identity and top secret security clearance to apply for almost 100 jobs last year. The scheme’s success rate was limited.

Former DHS CISO and acting deputy CIO Hamad Baidwan

The China-linked threat group has used the “Silent Train” framework, built on a series of rapidly rotating compromised devices, to infiltrate hundreds of critical infrastructure networks.

The scammers affected approximately 800 victims and led to losses of more than half a million dollars, the Justice Department said.

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild.

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.

The project overseeing the programming language is releasing patches Wednesday, with the internet racing to patch the 9.2 rated flaw.