Security Strategy, Plan, Budget

The U.S. Treasury Department has imposed sanctions against the State Research Center of the Russian Federation Central Scientific Research Institute of Chemistry and Mechanics, or TsNIIKhM, for its involvement in the development of the Trisis malware, also known as Triton.

Sixty-three percent of organizations impacted by ransomware attacks in 2021 provided payments to their attackers.

The U.S. Department of Justice and German federal police have successfully shut down the Russian dark web marketplace Hydra, which has contributed to nearly 80% of all dark web market-related cryptocurrency transactions last year.

Threat actors could exploit two 15-year-old security vulnerabilities in the PHP Extension and Application Repository, or PEAR, to launch supply chain attacks.

Cache hierarchy reverse-engineering has enabled attackers on one GPU to trigger cache contention on the other GPU.

The DoJ received a court order mid-March permitting it to disable Cyclops Blink malware still active on ASUS and WatchGuard brand network devices without the consent of the device owners.

Fifty-nine percent of organizations reported being "digital adopters" or "digital leaders" but only 15% had similar maturity levels in terms of automation.

At least 27,655 email addresses have been targeted by a phishing campaign spoofing WhatsApp's voice message capability to disseminate information-stealing malware.