Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.

The order cites national security concerns, including sending data to servers in China, the potential for malware and the overall risk to federal IT systems.

Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers.

Josh Bressers, VulnCheck’s director of coordinated vulnerability disclosure

In less than 10 months, cybercriminals used the arsenal of customized, targeted phishing kits to send more than 1 billion malicious messages to more than 75,000 organizations…

The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CISA and NSA.

U.S. Air Force Lt. Gen. Robert Skinner, former director of DISA and current chairman of Axonius Federal Systems’ board

As advances lower the barrier to breaking current encryption, Washington must move with equal urgency on post-quantum defenses.

Paul Nakasone said the reported reorganization is likely necessary to meet faster-moving cyberthreats and competition in AI, but warned its success will rest on execution and a…

Sean Cairncross talked about regulations, China, pilot projects and more Thursday.