access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/ also interesting: Top 7 zero-day exploitation trends of 2024 New Docker Malware Strain Spotted Blocking Rivals on Exposed APIs Docker APIs Targeted FireTail Blog Top…
-
Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks
U.S. Sens. Mark Warner (D-VA) and Ted Cruz (R-TX) introduced the Telecommunications Cybersecurity and Resilience Act on Thursday, arguing that the new effort was necessary in light of the Salt Typhoon attacks which saw Chinese hackers breach nearly all of the major telecommunications giants in the U.S. First seen on therecord.media Jump to article: therecord.media/lawmakers-introduce-bill-for-voluntary-telecom-cyber-rules…
-
Breach Roundup: Thousands of AI Relays Hide China Users
Tags: ai, breach, china, cisa, cve, cybercrime, data, data-breach, flaw, google, jobs, north-korea, russia, scam, vpnAlso, CISA Ends Weekly CVE Bulletin After 22 Years, Check Point VPN Flaw Exploited. This week: AI relay servers connect to China, CISA ends weekly CVE bulletin, cybercriminal guilty pleas and sentences, drug dealers hijack Google Maps, Russian Burger King customers’ data leaked, North Korean fake job scams, SectopRAT, a Check Point VPN flaw and…
-
OpenAI Agent Breached Australian Medicare Statistics Portal
An OpenAI agent bypassed controls on Australia’s Medicare statistics portal, accessed non-public data and was not reported to officials for nearly 3 months. First seen on hackread.com Jump to article: hackread.com/openai-agent-breached-australian-medicare-portal/ also interesting: Cybersecurity Snapshot: F5 Breach Prompts Urgent U.S. Gov’t Warning, as OpenAI Details Disrupted ChatGPT Abuses Top 5 real-world AI security threats revealed…
-
Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges
Two executives at a data extraction and digital forensics company that sold several U.S. agencies its software were arrested for allegedly lying about the fact that its technology is made in Russia. First seen on therecord.media Jump to article: therecord.media/russia-forensics-technology-doj also interesting: Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive, While Threat from North Korean…
-
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within days. MikroTik pushed out patches on September 3, 2026 for several RouterOS issues at once, calling it an important security update without saying what it actually fixed. That silence was deliberate, and it didn’t last…
-
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before.That is the thread running through the pile. Trusted paths get poisoned. Old bugs find new jobs. AI tools leak more than expected. Fake prompts…
-
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus’s own software to gain root access, the highest level of control over an Android phone.OnePlus told him the same flaws affect many…
-
SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta
Phoenix, Arizona, September 24th, 2026, CyberNewswire SCOUTz, a prospect intelligence platform built for managed service provider (MSP) security sales, is now available in open beta. The platform gives an MSP dated evidence about a prospect’s environment before the first meeting and keeps that evidence attached through delivery and reassessment. The open beta is available at…
-
SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta
Phoenix, Arizona, September 24th, 2026, CyberNewswire SCOUTz, a prospect intelligence platform built for managed service provider (MSP) security sales, is now available in open beta. The platform gives an MSP dated evidence about a prospect’s environment before the first meeting and keeps that evidence attached through delivery and reassessment. The open beta is available at…
-
SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta
Phoenix, Arizona, September 24th, 2026, CyberNewswire SCOUTz, a prospect intelligence platform built for managed service provider (MSP) security sales, is now available in open beta. The platform gives an MSP dated evidence about a prospect’s environment before the first meeting and keeps that evidence attached through delivery and reassessment. The open beta is available at…
-
Building AI Systems With ‘Least Capability’ Cuts Agent Risk
Akamai CTO Robert Blumofe on Reliability, Visibility and AI Security. AI systems that perform well in the lab can fail at scale, drive unexpected costs and expose new attack paths in production. Robert Blumofe, executive vice president and CTO at Akamai, says enterprises need stronger visibility, reliability engineering and a least capability model for AI…
-
AI Agents Need More Than Proofs of Concept
AWS’ Sivasubramanian Says Enterprises Need Focused AI Agent Investments. Enterprises risk getting trapped in AI proof-of-concept hell when they deploy agents without clear measures of success. AWS executive Swami Sivasubramanian explains how focused investments, shared infrastructure and human oversight can help move AI agents into production. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-agents-need-more-than-proofs-concept-a-32919 also…
-
Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation
Ardit Kutleshi, 28, was extradited from his home country of Kosovo last year after prosecutors accused him and his older brother of running Rydox, an illicit platform used by cybercriminals to sell stolen personal information, illegal access to devices and other tools for carrying out fraud. First seen on therecord.media Jump to article: therecord.media/rydox-criminal-marketplace-operator-pleads-guilty also…
-
Exposed GitLab project email addresses let attackers push code
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/exposed-gitlab-project-email-addresses-let-attackers-push-code/ also interesting: Cybersecurity Snapshot: CISA Hands Down Cloud Security Directive, While Threat from North Korean IT…
-
Rogue OpenAI Agent Hacks Australian Medicare Site
Government Launches Task Force, Urges Agencies to Shore Up Public-Facing Systems. Australian officials have launched a task force and are urging government agencies to shore up cybersecurity of their public-facing websites and apps after the country’s prime minister revealed that a rogue OpenAI agent hacked into the nation’s public health Medicare website in June. First…
-
Rogue OpenAI Agent Hacks Australian Medicare Site
Government Launches Task Force, Urges Agencies to Shore Up Public-Facing Systems. Australian officials have launched a task force and are urging government agencies to shore up cybersecurity of their public-facing websites and apps after the country’s prime minister revealed that a rogue OpenAI agent hacked into the nation’s public health Medicare website in June. First…
-
‘Psychedelic Stealer” Legitime ukrainische Websites verbreiten Clickfix-Köder
Tags: unclassifiedVeranschaulichung der fünf Phasen des Angriffsablaufs des ‘Psychedelic Stealers”, Quelle: Arctic WolfArctic Wolf Labs veröffentlicht neue Forschungsergebnisse zu einer aktuellen Kampagne, bei der Angreifer kompromittierte legitime ukrainische Websites zur Verbreitung eines Clickfix-Köders nutzen. Ein Verwaltungspanel mit russischem Branding dient dazu, Befehle zu konfigurieren und Besucherinteraktionen zu erfassen. Das öffentlich zugängliche Panel offenbarte domänenspezifische Befehlskonfigurationen und…
-
‘Psychedelic Stealer” Legitime ukrainische Websites verbreiten Clickfix-Köder
Tags: unclassifiedVeranschaulichung der fünf Phasen des Angriffsablaufs des ‘Psychedelic Stealers”, Quelle: Arctic WolfArctic Wolf Labs veröffentlicht neue Forschungsergebnisse zu einer aktuellen Kampagne, bei der Angreifer kompromittierte legitime ukrainische Websites zur Verbreitung eines Clickfix-Köders nutzen. Ein Verwaltungspanel mit russischem Branding dient dazu, Befehle zu konfigurieren und Besucherinteraktionen zu erfassen. Das öffentlich zugängliche Panel offenbarte domänenspezifische Befehlskonfigurationen und…
-
Sicherheit für Microsoft-365 Coreview startet Intelligence-Labs
Der Spezialist für den Schutz und das Management von Microsoft-365-Tenants, Coreview, hilft mit seinen neuen Intelligence-Labs Sicherheitsexperten dabei, die Prozesse in ihren Microsoft-Tenants zu verstehen und bestehende sowie neu auftretende Sicherheitslücken zu schließen. Hierfür werden die Sicherheitsforscher unter der Leitung von Kasper Lindgaard technische Forschungsergebnisse und praktische Leitfäden zur Sicherheit von Microsoft-365 veröffentlichen. Die Einführung…
-
Trust and the enticing consultancy offer
In this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hubris might be the real vulnerability that the cyber industry must worry about. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/trust-and-the-enticing-consultancy-offer/ also interesting: SPAWNCHIMERA Malware Exploits Ivanti Buffer Overflow Vulnerability by…
-
New bill would create federal investigative body for AI-driven hacks
A new Democratic bill in Congress would establish a federal Cybersecurity and AI Board of Investigations to provide independent government oversight of cyberattacks carried out by AI agents, following recent hacks by models run at companies like Anthropic, OpenAI, Meta and others. The bill, introduced by Sen. Ed Markey, D-Mass., would attempt to establish a…
-
Cryptohack Roundup: US Sanctions BitBank
Also: South Korea Books 26 Polymarket Users for Alleged Illegal Gambling. This week, the United States sanctioned Iranian exchange BitBank, South Korea booked 26 Polymarket users and Polymarket faced $10 million fraud attempt. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cryptohack-roundup-us-sanctions-bitbank-a-32914 also interesting: Successful Military Attacks are Driving Nation States to Cyber Options Top 10…
-
ISMG Security Report: AI Doesn’t Wait for Patch Tuesday
AI Bug Discovery Forces Security Teams to Rethink Vulnerability Management. AI is getting scary good at finding software vulnerabilities. Anthropic says Claude Mythos previews uncovered more than 10,000 flaws in key software products. That’s great news, but somebody still has to triage them, figure out which ones attackers can actually exploit and, eventually, patch them.…
-
ISMG Security Report: AI Doesn’t Wait for Patch Tuesday
AI Bug Discovery Forces Security Teams to Rethink Vulnerability Management. AI is getting scary good at finding software vulnerabilities. Anthropic says Claude Mythos previews uncovered more than 10,000 flaws in key software products. That’s great news, but somebody still has to triage them, figure out which ones attackers can actually exploit and, eventually, patch them.…
-
ISMG Security Report: AI Doesn’t Wait for Patch Tuesday
AI Bug Discovery Forces Security Teams to Rethink Vulnerability Management. AI is getting scary good at finding software vulnerabilities. Anthropic says Claude Mythos previews uncovered more than 10,000 flaws in key software products. That’s great news, but somebody still has to triage them, figure out which ones attackers can actually exploit and, eventually, patch them.…
-
Microsoft Password Reset Portal Can Leak Account Verification Details
LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication. First seen on hackread.com Jump to article: hackread.com/microsoft-password-reset-portal-leak-account-details/ also interesting: Privacy Roundup: Week 7 of Year 2025 The most notorious and damaging ransomware of all time Privacy Roundup: Week 12 of Year 2025 Top cybersecurity M&A…
-
Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges
The Justice Department said two leaders of the company have been arrested and face conspiracy to commit wire fraud. First seen on cyberscoop.com Jump to article: cyberscoop.com/oxygen-forensics-ceo-arrested-russian-ownership-fraud/ also interesting: The most notorious and damaging ransomware of all time TDL001 – Cybersecurity Explained: Privacy, Threats, and the Future – Chester Wisniewski Russia used Cellebrite phone-hacking tool…
-
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
The “third-party[.]com” domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to other users.”third-party[.]com has been a generic documentation placeholder for years, the same role example.com plays,” Manifold Security’s Head of Research, Ax Sharma, said. “Unlike ‘example[.]com,’ third-party[.]com First seen on thehackernews.com…
-
3 Cyber Threats That Defined the Summer of 2026
This installment of the Reporters’ Notebook video series discusses the impact of AI agents breaching Hugging Face, Fairlife’s ransomware attack, and Iranian-linked threat actors compromising a dozen US water systems. It was a busy summer. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/3-cyber-threats-defined-summer-2026 also interesting: 8 biggest cybersecurity threats manufacturers face 8 biggest cybersecurity threats…
-
The Hidden Security Risks of Devices You Forgot Were Connected
IoT and OT devices can create hidden security gaps. Learn how asset visibility helps organizations find forgotten devices and reduce network security risks now. First seen on hackread.com Jump to article: hackread.com/hidden-security-risks-connected-devices/ also interesting: U.S. House Homeland Security Appropriations Bill Seeks to Modernize Border Infrastructure Security with Proactive OT/IT Security Measures 7 obsolete security practices…
-
Kombination aus Software, Beratung und Moderation unterstützt Unternehmen bei normgerechtem Risikomanagement
Die Bassetti Group und die PSCR Consulting bündeln ihre Kompetenzen im deutschsprachigen Raum. Gemeinsam bieten Knowllence, ein Unternehmen der Bassetti Group, und PSCR Consulting ein integriertes Angebot für die Fehlermöglichkeits- und Einflussanalyse (FMEA), das Software, Moderation und Schulung miteinander verbindet. Ziel der Partnerschaft ist es, Unternehmen bei der Einführung und Durchführung normgerechter Risikoanalysen zu unterstützen.…
-
Künstliche Intelligenz als Kraftmultiplikator in der Cyberabwehr
Russische offensive Cyberoperationen sind seit 2014 ein zentraler Bestandteil der Aggression des Kremls gegen die Ukraine. Ukrainische Verteidiger stehen unter ständigem Druck zusätzlich zu den physischen Angriffen auf die Infrastruktur des Landes. Vor diesem Hintergrund ist es eine begrüßenswerte Entwicklung, dass OpenAI der Ukraine im Rahmen seines Daybreak-Programms nun KI-Tools zur Cyberabwehr ziviler Infrastruktur […]…
-
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ also interesting: Scattered Lapsus$ Hunters extortion site goes dark: What’s next? The cybercrime industry continues to challenge CISOs in 2026 Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure…
-
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ also interesting: Scattered Lapsus$ Hunters extortion site goes dark: What’s next? The cybercrime industry continues to challenge CISOs in 2026 Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure…
-
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ also interesting: Scattered Lapsus$ Hunters extortion site goes dark: What’s next? The cybercrime industry continues to challenge CISOs in 2026 Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure…
-
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
Ransom notes by n0n ransomware claim to take double extortion to a new level of danger for victims First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/ also interesting: Scattered Lapsus$ Hunters extortion site goes dark: What’s next? The cybercrime industry continues to challenge CISOs in 2026 Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure…
-
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic.”When a visitor interacts with the page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into the…
-
Wiz uses AI to find vulnerabilities in railroads, hospitals and other critical infrastructure
The Google subsidiary invited all infrastructure operators to apply for its free scanning service. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/wiz-ai-critical-infrastructure-scan-for-good/831255/ also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors 9 top bug bounty programs launched in 2025 7 biggest healthcare security threats Wiz uses AI to find vulnerabilities in railroads, hospitals…
-
Wiz uses AI to find vulnerabilities in railroads, hospitals and other critical infrastructure
The Google subsidiary invited all infrastructure operators to apply for its free scanning service. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/wiz-ai-critical-infrastructure-scan-for-good/831255/ also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors 9 top bug bounty programs launched in 2025 7 biggest healthcare security threats Wiz uses AI to find vulnerabilities in railroads, hospitals…
-
Wiz uses AI to find vulnerabilities in railroads, hospitals and other critical infrastructure
The Google subsidiary invited all infrastructure operators to apply for its free scanning service. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/wiz-ai-critical-infrastructure-scan-for-good/831255/ also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors 9 top bug bounty programs launched in 2025 7 biggest healthcare security threats Wiz uses AI to find vulnerabilities in railroads, hospitals…
-
US military confirms existence of orbital weapons
The US military has for the first time confirmed the existence of orbital weapons, but has not divulged details of their capabilities or whether they have been integrated with Space Force’s growing arsenal of AI systems First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651073/US-military-confirms-existence-of-orbital-weapons also interesting: How to Not Get Scammed Out of $50,000 Autonomous…
-
Avalara Aviator automatisiert Steuer- und Compliance-Prozesse mit KI-Agenten
Avalara Aviator verbindet spezialisierte KI-Agenten mit Steuer- und Compliance-Prozessen und automatisiert komplexe Workflows unter menschlicher Kontrolle. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/avalara-aviator-automatisiert-steuer-und-compliance-prozesse-mit-ki-agenten/a46463/ also interesting: Cybersecurity Snapshot: CSA Outlines Data Security Challenges and Best Practices, While ISACA Offers Tips To Retain IT Pros Homomorphic Encryption for Privacy-Preserving Model Context Sharing The cybercrime industry continues…
-
Vertraute Repositorys werden zur Falle – Acht Sicherheitslücken in populären KI-Coding-Agents entdeckt
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/gitspawn-sicherheitsluecken-ki-coding-agents-git-konfiguration-a-071c5b11c3362ee025667c42b87a0a3b/ also interesting: Responsible AI – Die Zukunft der KI ist verantwortungsvoll noyb schickt Meta eine Unterlassungserklärung wegen AI-Training What Security Leaders Need to Know About AI Governance for SaaS Okta introduces Identity Security Fabric to secure AI agents
-
How to Build A SASE Framework for Modern Cybersecurity
Keeping edge computing safe requires organizations to fundamentally rethink security governance. Here is a path forward: a step-by-step guide to building a SASE framework. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/how-to-build-sase-framework also interesting: Gen AI is transforming the cyber threat landscape by democratizing vulnerability hunting Cybersecurity Snapshot: Expert Advice for Securing Critical Infrastructure’s OT…
-
Auf der Suche nach kostenlosen Robux? Hier erfährst du, was echt und was Betrug ist
Tags: fraudGefälschte Gewinnspiele, kostenlose Robux-Generatoren und gefälschte Anmeldeseiten haben alle dasselbe Ziel Dein Roblox-Konto First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/kinderschutz/auf-der-suche-nach-kostenlosen-robux-hier-erfahrst-du-was-echt-und-was-betrug-ist/ also interesting: Indian Govt Rescues 250 Citizens Trapped In Cambodia Forced Into Cyber-Slavery Indian Authorities Bust Cybercriminals Posing as Microsoft Tech Support Synthetic Identity Theft in 2025: How Digital Identity Intelligence Detects Fraud That…
-
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
FedRAMP’s new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements. Anecdotes explains why the December 7 deadline is just the beginning of a broader shift toward continuous, automated compliance validation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fedramp-vdr-and-ver-daily-scans-are-only-the-beginning/ also interesting: New Cybersecurity Executive Order:…
-
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
FedRAMP’s new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements. Anecdotes explains why the December 7 deadline is just the beginning of a broader shift toward continuous, automated compliance validation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fedramp-vdr-and-ver-daily-scans-are-only-the-beginning/ also interesting: New Cybersecurity Executive Order:…
-
SCOUTz Prospect Intelligence Platform Launches for MSPs with 30-Day Beta
Phoenix, Arizona, 24th September 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/scoutz-prospect-intelligence-platform-launches-for-msps-with-30-day-beta/ also interesting: CrowdStrike’s Adam Meyers On ‘Up-Leveled’ Hacking By China, Threats To MSPs Critical Start Arms MSSPs, MSPs with Cyber Threat Intelligence Sophos finalizes $859 million acquisition of rival Secureworks What is a CISO? The top IT security leader role explained
-
Bipartisan Senate leaders introduce bill to bolster telecom cybersecurity in response to Salt Typhoon hacks
The legislation from Senate Intelligence Vice-Chairman. Mark Warner, D-Va., and Senate Commerce Chairman Ted Cruz, R-Tex., would create a government-industry group to write voluntary best practices. First seen on cyberscoop.com Jump to article: cyberscoop.com/senate-telecom-cybersecurity-resilience-act-salt-typhoon/ also interesting: Phishing Season 2025: The Latest Predictions Unveiled Cybersecurity Snapshot: Tenable Report Spotlights Cloud Exposures, as Google Catches Pro-Russia Hackers…