Static checklists and annual penetration tests leave agencies with dangerous blind spots. True resilience requires moving from reactive attestation to continuous, automated validation. The post Why federal cyber defense demands an offense-driven mindset appeared first on CyberScoop.
July’s intrusions reached water controllers that sat on a cellular link no city network scan would find. Naming an owner and paying for the fix are decisions a utility can make this fiscal year, out of money it already applies for. The post In most cities, nobody owns the whole network appeared first on CyberScoop.
A data extortion group calling itself ShinyHunters says it broke into a Florida driver database and pulled more than 200,000 records, then posted a screenshot of Jeffrey Epstein’s DMV file as proof. The claim surfaced on the group’s dark web leak site on September 7, 2026, and was independently reported by BleepingComputer the following day.…
VPN stands for virtual private network. It shields your internet connection from cybercriminals by encrypting your device data and masking your IP address, so you can access shows in a secure environment and appear to be from a different geographical location. A VPN unlocks local content on demand and keeps your streaming passwords safe. So,…
Executive summary China-based artificial intelligence (AI) companies are conducting systematic extraction of proprietary functionalities and capabilities of U.S. AI companies’ models through industrial-scale knowledge distillation campaigns that form the core—not merely a supplement—of their AI development strategy. While “distillation” is recognized as a legitimate and useful technique in AI research, China-based AI companies are engaging…
Eight months after hackers dumped Sony’s PlayStation 5 BootROM keys online, the console maker still has no fix, and by its own hardware design, it may never have one. The leak, first reported in early January 2026, exposed cryptographic keys baked directly into the read-only memory of the PS5’s system-on-chip. Because those keys sit in…
AWS rolled out Lambda MicroVMs in June 2026, and it changes the calculus for anyone building interactive, multi-tenant, or AI-agent workloads on serverless infrastructure. Instead of the stateless, sub-15-minute request-response model that has defined Lambda since 2014, MicroVMs give each user or job a dedicated, VM-isolated compute environment that can hold state for up to…
A Bitcoin sidechain used by several major exchanges to move funds behind the scenes has just handed the crypto industry its biggest security scare of the second half of 2026. On September 6, an attacker withdrew roughly 4,000 BTC, worth about $320 million, from the federation reserve behind Blockstream’s Liquid Network. Within a day, most…
N-able shipped a fourth emergency hotfix for its N-central remote monitoring and management platform on September 6, 2026, after Huntress security researchers flagged CVE-2026-86218, a pre-authentication remote code execution flaw carrying the maximum possible severity score of 10.0. It is the third distinct N-central vulnerability disclosed inside six weeks, and the second time in three…
Pokémon Champions is not getting a single-player mode anytime soon, and the reason has nothing to do with a lack of ideas at Game Freak. According to a report published by My Nintendo News on September 7, 2026, the game’s director explained in a recent interview that adding offline content would work against the title’s…