Kenny Paterson - Professor of Computer Science, ETH Zurich

Google researchers said Chinese attackers have been exploiting a zero-day since mid-2024, and they’ve moved on to a more advanced version of Brickstorm malware called Grimbolt.

The vendor said the memory-corruption defect was exploited to target specific people, but it did not describe the objectives of the attack.

One industry official told CyberScoop the town halls are probably not what CIRCIA needs right now.

Acting Director Madhu Gottumukkala said it could affect everything from responding to threats to finalizing CIRCIA regulations.

Microsoft said three of the exploited vulnerabilities were publicly known, suggesting attackers already had details about the defects prior to Tuesday’s release.

The Cybersecurity and Infrastructure Security Agency said the attack highlighted threats from vulnerable edge devices to operational technology and industrial control systems.

Shadowserver scans have identified 86 compromised instances, and researchers warn multiple threat groups are involved.

A binding operational directive issued Thursday looks to combat an attack pathway that has been behind some of the biggest attacks and most common exploits in recent…

Nick Andersen, a top CISA official, discussed plans for improving CIPAC and developing an AI-ISAC.