#cybersecurity

Lobbyists for major tech firms are backing Colorado legislation that would exempt broadly defined ‘critical infrastructure’ hardware from the state’s right-to-repair law, alarming repair advocates and security experts.

A new administration budget proposal would cut at least $707 million from CISA in 2027, sharply shrinking the agency’s resources as officials say it should refocus on network defense and critical infrastructure.

A new AI News report argues that modern AI systems create attack surfaces traditional security models were not built to handle, pushing security teams toward AI-specific controls and thinking.

A reposting wave after Anthropic’s reported Claude Code source leak has already been used to spread infostealer malware, underscoring how fast developer attention can be weaponized.

New FTC data and recruiter guidance point to a sharp rise in fraudulent job offers, with scammers exploiting remote-work expectations and desperate applicants.

Meta has paused work with data vendor Mercor after a security incident, while other AI labs assess whether proprietary training-data workflows were exposed.

The telehealth company says hackers accessed a third-party ticketing system in February and stole customer support data, highlighting the growing risk around outsourced service platforms.

Security researchers told 404 Media that TeleGuard uploads users’ private keys to company servers and exposes enough information to make message decryption trivial, raising serious doubts about its end-to-end encryption.

A report cited by 9to5Mac says Meta has alerted about 200 users who downloaded a spyware-laced fake version of WhatsApp, underscoring how mobile impersonation attacks keep slipping past user trust.

European defense firms have tested a drone platform described as quantum-safe, an early sign that post-quantum security is starting to enter real-world unmanned systems development.

Decentralized finance platform Drift froze deposits and withdrawals after confirming an active attack, while outside security firms estimated losses ranging from roughly $136 million to $285 million.

Hasbro disclosed a cyberattack detected on March 28, warning investors that interim business continuity measures may need to remain in place for several weeks.

AI recruiting startup Mercor says it was among the companies affected by a compromise of the open-source LiteLLM project, confirming a security incident as extortion actors also claimed to hold stolen company data.

CareCloud disclosed that hackers accessed one of its patient-record repositories for more than eight hours in March, underscoring the continued vulnerability of health data infrastructure.

The Federal Communications Commission has halted all new equipment authorizations for routers not manufactured in the United States, a sweeping national security measure that leaves existing approved devices in legal limbo — and raises hard questions about who will fill the supply gap.

The FCC has ruled that virtually all consumer wireless routers sold in the US must be domestically manufactured, effectively banning popular foreign brands from retail shelves. Existing devices remain legal to use, but the supply chain shock will reshape home networking.

The US Space Force has established dedicated cyber defense squadrons at Cape Canaveral and Vandenberg to protect launch operations from malicious hacking, as adversaries increasingly target the digital infrastructure supporting US space missions.

A cyberattack on Des Moines-based Intoxalock left thousands of drivers who rely on breath-test ignition locks unable to start their vehicles across the country, exposing the fragility of cloud-connected compliance hardware.

Shardul Shah of Index Ventures breaks down Google's record $32 billion acquisition of cybersecurity firm Wiz and what it reveals about the future of cloud security competition.

Security flaws found in consumer robots — including hardcoded keys in the Unitree G1 humanoid — expose a fundamental vulnerability in physical AI that could prove far more dangerous in industrial settings.