The kits, which the company said were a sophisticated approach to bypassing multifactor authentication, pose a particular threat to the financial services sector.

The interim Federal Chief Information Security Officer spelled out some 2025 agenda items for feds at CyberTalks.

Shelly Hartsook said she’s seen promising data on implementation of security protocols ahead of next week’s due date for agencies to submit updated plans.

Officials at the cyber agency are doubling down on shifting the security onus to software makers.

An international advisory says that the purpose of the “brute force” attacks is to sell the info to cybercrime forums.

The requirement begins Oct. 1. and would apply to plugin and theme authors.

Microsoft researchers say the group, tracked as Storm-0539 or Atlas Lion, targets employees with major U.S. retailers who control gift card operations.

The commitments are voluntary, but CISA officials said they are committed to measuring progress by the signatories across key commitments over the next year.

In wake of SEC breach, federal policymakers, agencies, and experts can't seem to agree on whether agencies must use MFA on social media.

Multifactor authentication was disabled at the SEC’s request last year after staff had difficulties accessing the social media account.