Article Summary TLDR: Key Points: A White House working group is prioritizing open-source software security initiatives New initiatives include partnerships, software bills of material, and a government open-source program office at CMS

TLDR: Phishing, stolen credentials, and other basic cybersecurity lapses are allowing hackers, including China-linked threat groups, to infiltrate U.S. critical infrastructure networks. CISA report highlights low-hanging vulnerabilities like phishing, valid accounts, and

Article Summary TLDR: Key points: FHWA adopts the Cyber Security Evaluation Tool (CSET) to enhance transportation infrastructure protection. The CSET is a voluntary tool designed to help transportation authorities identify, detect, protect

TLDR: The 3rd Infantry Division conducted the Army’s first long-range, fully remote cybersecurity operation at the division level while the 1st Armored Brigade Combat Team was at Fort Irwin, California. The remote

TLDR: Microsoft’s licensing practices pose a threat to national security, as they have a cozy relationship with China. Government agencies are locked into using Microsoft products, making them vulnerable to security breaches.

TLDR: New GAZEploit Attack Lets Hackers Capture Keystrokes from Apple Vision Pro A vulnerability known as GAZEploit allows hackers to capture keystrokes from Apple Vision Pro’s virtual keyboards by analyzing eye movements.

TLDR: Janet L. Rathod named chief information security officer at Johns Hopkins, bringing over two decades of experience in cybersecurity. Rathod has previously worked at Citigroup, Capital One, and the FBI, and

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers TLDR: Security flaw in Apple’s Vision Pro mixed reality headset allowed attackers to infer data entered on the virtual keyboard Attack dubbed

TLDR: A possible zero-day vulnerability was discovered in Adobe Reader. Researchers were able to hijack the .mobi TLD by spending $20. WhatsApp’s View Once feature was exploited in the wild. SecurityWeek’s cybersecurity

TLDR: 94 cybersecurity service providers, professionals, and establishments were certified and accredited by the Cyber Security Authority (CSA). Certification and accreditation ensure services meet approved standards and procedures. A total of 94