Cyber Scoop

4 min read

• Active Directory
• Brickstorm
• China
• CISA
• CrowdStrike
• Cybersecurity
• Cybersecurity and Infrastructure Security Agency (CISA)
• Department of Homeland Security (DHS)
• Google Threat Intelligence Group
• Government
• Mandiant
• Research
• Threats
• vmware
• Windows

Officials warn about expansive, ongoing China espionage threat riding on Brickstorm malware

Cyber Scoop December 4, 2025

Officials warn about expansive, ongoing China espionage threat riding...

Read More

4 min read

• AI
• AI safety
• artificial intelligence (AI)
• Cybersecurity
• Government
• Mark Kelly
• Policy
• Privacy

Sen. Mark Kelly: Investing in safe, secure AI is key to U.S. dominance

Cyber Scoop December 4, 2025

Sen. Mark Kelly: Investing in safe, secure AI is key...

Read More

4 min read

• Bridget Bean
• Cybersecurity and Infrastructure Security Agency (CISA)
• Department of Homeland Security (DHS)
• Government
• Government Accountability Office
• Jen Easterly
• Kristi Noem
• Madhu Gottumukkala
• National Cybersecurity Strategy
• Rick Scott
• Ron Wyden
• Sean Plankey
• Senate Homeland Security and Governmental Affairs Committee
• Ted Budd
• Thom Tillis
• U.S. Coast Guard
• workforce

Sean Plankey nomination to lead CISA appears to be over after Thursday vote

Cyber Scoop December 4, 2025

Sean Plankey nomination to lead CISA appears to be...

Read More

3 min read

• artificial intelligence (AI)
• China
• critical infrastructure
• cyber offense
• cybercrime
• deterrence
• Government
• National Cyber Director
• National Cybersecurity Strategy
• Policy
• post quantum cryptography
• workforce

Five-page draft Trump administration cyber strategy targeted for January release

Cyber Scoop December 4, 2025

Five-page draft Trump administration cyber strategy targeted for January...

Read More

3 min read

• conspiracy
• cybercrime
• Cybersecurity
• data breaches
• Data theft
• Department of Homeland Security (DHS)
• Department of Justice (DOJ)
• Eastern District of Virginia
• Equal Employment Opportunity Commission
• Government
• hacking
• insider threat
• IRS
• wire fraud

Twins with hacking history charged in insider data breach affecting multiple federal agencies

Cyber Scoop December 3, 2025

Twins with hacking history charged in insider data breach...

Read More

4 min read

• cybercrime
• Cybersecurity
• Meta
• open source
• open source software
• Rapid7
• React
• Research
• Threats
• VulnCheck
• vulnerabilities
• vulnerability disclosure
• vulnerability reporting
• watchTowr
• Wiz

Developers scramble as critical React flaw threatens major apps

Cyber Scoop December 3, 2025

Developers scramble as critical React flaw threatens major apps...

Read More

5 min read

• Congress
• Cybersecurity
• FCC
• Government
• Policy
• regulation
• Salt Typhoon
• Senate Commerce Committee

The Congressional remedy for Salt Typhoon? More information sharing with industry

Cyber Scoop December 2, 2025

The Congressional remedy for Salt Typhoon? More information sharing...

Read More

3 min read

• California
• Clop
• Cox Enterprises
• cybercrime
• Cybersecurity
• Dartmouth College
• data breaches
• Harvard
• Harvard University
• Logitech
• MOVEit Transfer
• Oracle
• ransomware
• Threats
• University of Pennsylvania
• vulnerabilities
• vulnerability
• vulnerability disclosure
• Zero-day
• zero-day exploit

University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks

Cyber Scoop December 2, 2025

University of Pennsylvania joins growing pool of Oracle customers...

Read More

3 min read

• August Pfluger
• Congress
• critical infrastructure
• cyberespionage
• Cybersecurity
• deterrence
• energy
• financial sector
• Geopolitics
• Government
• National Cyber Director
• Policy
• Salt Typhoon
• sanctions
• Senate Commerce Committee
• Ted Cruz
• Ted Yoho
• Telecommunications

Legislation would designate ‘critical cyber threat actors,’ direct sanctions against them

Cyber Scoop December 2, 2025

Legislation would designate ‘critical cyber threat actors,’ direct sanctions...

Read More

2 min read

• Android
• Cybersecurity
• Cybersecurity and Infrastructure Security Agency (CISA)
• Google
• known exploited vulnerabilities (KEV)
• patch management
• Technology
• vulnerabilities
• vulnerability
• vulnerability disclosure
• Vulnerability Management
• vulnerability reporting

Google addresses 107 Android vulnerabilities, including two zero-days

Cyber Scoop December 1, 2025

Google addresses 107 Android vulnerabilities, including two zero-days |...

Read More