Government Regulations

Governance, Risk and Compliance

Security Strategy, Plan, Budget

Government security

News

Trump cyber policy focuses on offensive operations, harnessing AI

<body><h3>Interview with Anna Pham</h3></body>

<body>Breaking in with ClickFix: Anatomy of a modern endpoint attack</body>

<body>Breaking in with ClickFix: Anatomy of a modern endpoint attack</body>

<body>Cybersecurity company Huntress just published a report on a new ClickFix variant they’ve discovered, which they’ve dubbed CrashFix. This technique was developed by KongTuke to serve as the primary lure within a new custom malicious browser extension also created by the group.</body>

<body>Cybersecurity company Huntress just published a report on a new ClickFix variant they’ve discovered, which they’ve dubbed CrashFix. This technique was developed by KongTuke to serve as the primary lure within a new custom malicious browser extension also created by the group. </body>

<body>In short, the team observed the threat actors using KongTuke’s malicious browser extension to display a fake security warning, claiming the browser had “stopped abnormally” and prompting users to run a “scan” to remediate the threats. Upon “running the scan,” the user is presented with a fake “Security issues detected” alert and instructed to manually “fix” the issue by opening the Windows Run dialog, pasting from their clipboard, and pressing Enter.</body>

<body>In short, the team observed the threat actors using KongTuke’s malicious browser extension to display a fake security warning, claiming the browser had “stopped abnormally” and prompting users to run a “scan” to remediate the threats. Upon “running the scan,” the user is presented with a fake “Security issues detected” alert and instructed to manually “fix” the issue by opening the Windows Run dialog, pasting from their clipboard, and pressing Enter. </body>

<body>The malicious extension silently copies a PowerShell command to the clipboard, disguised as a legitimate repair command. From there, they execute the malicious command.</body>

<body>The malicious extension silently copies a PowerShell command to the clipboard, disguised as a legitimate repair command. From there, they execute the malicious command. </body>

<body><ul><li>BLOG - <a rel="noreferrer noopener" target="_blank" href="https://www.huntress.com/blog/malicious-browser-extention-crashfix-kongtuke">Dissecting CrashFix: KongTuke's New Toy</a></li></ul></body>

<body>Interview with David Zendzian</body>

<body><h3>Interview with David Zendzian</h3></body>

<body>Continuous compliance and real security lifecycle management</body>

<body>Continuous compliance and real security lifecycle management</body>

<body>Supply chain attacks are not just on the rise; attackers are learning from the past, making these attacks even more effective and dangerous than before. It was just over a month ago when the Shai-Hulud attack first impacted NPM packages, forcing enterprises around the world into lockdown. While only 187 packages were compromised in that initial incident, it served as a wake-up call for many: an accurate inventory of systems is good, but a clear, real-time Software Bill of Materials (SBOM) for applications is non-negotiable.</body>

<body>Supply chain attacks are not just on the rise; attackers are learning from the past, making these attacks even more effective and dangerous than before. It was just over a month ago when the Shai-Hulud attack first impacted NPM packages, forcing enterprises around the world into lockdown. While only 187 packages were compromised in that initial incident, it served as a wake-up call for many: an accurate inventory of systems is good, but a clear, real-time Software Bill of Materials (SBOM) for applications is non-negotiable.</body>

<body>In this world of manifest based infrastructure and container based applications with (real) "devsecops", the dream of continuous upgrades of OS/Runtime/Stack/App and App Dependencies is very mature and there are solid examples of companies and federal entities managing this at scale without thousands of teams and people.</body>

<body>In this world of manifest based infrastructure and container based applications with (real) "devsecops", the dream of continuous upgrades of OS/Runtime/Stack/App and App Dependencies is very mature and there are solid examples of companies and federal entities managing this at scale without thousands of teams and people.</body>

<body><ul><li>BLOG - <a rel="noreferrer noopener" target="_blank" href="https://blogs.vmware.com/tanzu/supply-chain-security-how-accurate-sboms-can-deliver-proactive-threat-mitigation/">Supply Chain Security: How accurate SBOMs can deliver proactive threat mitigation</a></li></ul></body>

<body><h3>Interview with Jacob Horne</h3></body>

<body>CMMC Phase 1 Enforcement — What the November 10 Deadline Means for the Defense Supply Chain</body>

<body>CMMC Phase 1 Enforcement — What the November 10 Deadline Means for the Defense Supply Chain</body>

<body>With the upcoming CMMC Phase 1 enforcement on November 10, cybersecurity teams across the defense and federal supply chain are facing new compliance requirements that directly affect contract eligibility and data-protection standards. Jacob Horne, Chief Cybersecurity Evangelist at Summit 7, can break down what this milestone means for enterprise security leaders, MSPs/MSSPs, and contractors preparing for audits.</body>

<body>With the upcoming CMMC Phase 1 enforcement on November 10, cybersecurity teams across the defense and federal supply chain are facing new compliance requirements that directly affect contract eligibility and data-protection standards. Jacob Horne, Chief Cybersecurity Evangelist at Summit 7, can break down what this milestone means for enterprise security leaders, MSPs/MSSPs, and contractors preparing for audits.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14481″} podcast from PPWorks

Malware

Supply chain

Breaking in with CrashFix, supply chain security, and CMMC phase 1 – Anna Pham, David Zendzian, Jacob Horne – ESW #449

Internet privacy concept

Privacy

Data Security

Brief

Data privacy violations result in $1.1M penalty for PlayOn Sports

IRS Calls For Some Employees To Return To Offices To Deal With Backlog

Exhaustive cybersecurity review launched at IRS amid privacy concerns

The United States Immigration and Customs Enforcement (ICE) agency enforces immigration laws and combats transnational crime.

Guilherand-Granges, France – February 01, 2025. The United State

Congressional Dems press DHS watchdog on ICE location data purchases

Hybrid IT environment diagram with metadata overlay showing integration between on-prem infrastructure and cloud services in enterprise network visual

Cloud Security

Cloud security models face sovereignty test

Wooden judges gavel on wooden table, close up

Samsung settles Texas smart TV data collection lawsuit

Digital security heart lock with heartbeat graph, representing cybersecurity in healthcare. Futuristic, technology, protection and health concept.