Former NSA cyberspy's not-so-secret hobby: Hacking Christmas lights Video Rob Joyce explains how it's done Security25 Dec 2024 | 18
America's enemies targeting US critical infrastructure should be 'wake-up call' RSAC Having China, Russia, and Iran routinely rummaging around is cause for concern, says ex-NSA man Spotlight on RSA09 May 2024 | 8
NSA guy who tried and failed to spy for Russia gets 262 months in the slammer Tried to sell top secret docs for the low, low price of $85K Cyber-crime30 Apr 2024 | 27
Psst, hey. It's the NSA. You want some AI security advice? You can trust us, we're the good guys AI + ML17 Apr 2024 | 2
As NSA buys up Americans' browser records, Uncle Sam is asked to simply knock it off If you could just not harvest our info unlawfully and without a warrant, that would be great Public Sector26 Jan 2024 | 18
No new top boss at NSA until it answers questions about buying up location, browsing data Senator Ron Wyden puts his foot down – for as long as he can Public Sector02 Dec 2023 | 36
Ex-GCHQ software dev jailed for stabbing NSA staffer Terrorist ideology suspected to be motivation Security03 Nov 2023 | 43
Ex-NSA techie pleads guilty to selling state secrets to Russia Wannabe spy undone by system logs, among other lapses in judgement Security24 Oct 2023 | 11
CISA reveals 'Admin123' as top security threat in cyber sloppiness chart Calls for wider adoption of security-by-design principles continue to ring loudly from Uncle Sam Security06 Oct 2023 | 8
NSA hopes AI Security Center will help US outsmart, outwit, and outlast adversaries Agency boss warns enemies trying to nick AI advances and 'corrupt our application of it' AI + ML02 Oct 2023 | 1
Feds' privacy panel backs renewing Feds' S. 702 spying powers — but with limits FBI agents ought to get spy court approval before reviewing US persons' chats, board reckons Security28 Sep 2023 | 2
Millions of people's data stolen because web devs forget to check access perms IDORs of the storm CSO29 Jul 2023 | 40
To kill BlackLotus malware, patching is a good start, but... ...that alone 'could provide a false sense of security,' NSA warns in this handy free guide for orgs CSO22 Jun 2023 | 4
10 years after Snowden's first leak, what have we learned? Feature Spies gonna spy Security07 Jun 2023 | 36
US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster It's not all doom and gloom because ML also amplifies defensive efforts, probably CSO12 Apr 2023 | 15
Why a top US cyber spy urges: Get religious about backups Lesson we've learned from Ukraine Defense Tech Week03 Apr 2023 | 36
Supreme Court not interested in hearing about NSA's super-snoop schemes Warrantless data harvesting, you say? Feds have their secret reasons and we're OK with that Personal Tech22 Feb 2023 | 27
Months after NSA disclosed Microsoft cert bug, datacenters remain unpatched You know when we all said quit using MD5? We really meant it CSO26 Jan 2023 | 3
IPv6 for Dummies: NSA pushes security manual on DoD admins There's good advice here for any IT pro dealing with the transition Networks25 Jan 2023 | 26
NSA asks Congress to let it get on with that warrantless data harvesting, again In brief Also: That Pokemon is actually a RAT, Uncle Sam fails a password audit Security14 Jan 2023 | 24
NSA urges orgs to use memory-safe programming languages C/C++ on the bench, as US snoop HQ puts its trust in Rust, C#, Go, Java, Ruby, Swift Security11 Nov 2022 | 154
NSA urges enterprises to watch China, Taiwan tensions Have you thought about your supply chains, partnerships, and how far they reach? Security18 Oct 2022 | 2
Cyber-snoops broke into US military contractor, stole data, hid for months Tell us it’s Russia without telling us it’s Russia Security05 Oct 2022 | 14
FBI: We tracked who was printing secret documents to unmask ex-NSA suspect Infosec systems designer alleged to have chatted with undercover agent Security03 Oct 2022 | 53
As Cybersecurity Week begins, Beijing claims US attacked Uni doing military research National Security Agency apparently has tools that crack Solaris boxes Security07 Sep 2022 | 10
Don't ditch PowerShell to improve security, say infosec agencies from UK, US, and NZ Use it sensibly instead – which means turning on the useful bits Microsoft doesn't enable by default Security23 Jun 2022 | 20
Beijing-backed baddies target unpatched networking kit to attack telcos NSA, FBI and CISA issue joint advisory that suggests China hardly has to work for this – flaws revealed in 2017 are among their entry points Security08 Jun 2022 | 3
US cyber chiefs: Moving to Shields Down isn't gonna happen RSA Conference Promises new alert notices but warn 'we can sometimes predict thunderstorms but not lightning strikes' CSO08 Jun 2022 | 6
False-flag cyberattacks a red line for nation-states, says Mandiant boss NSA director says he doesn't know of a 'big one' that was successful CSO07 May 2022 | 27
US Cyber Command shored up nine nations' defenses last year 'Hunt forward' operations push US capabilities across borders Security04 May 2022 | 15
Five Eyes nations reveal 2021's fifteen most-exploited flaws Malicious cyber actors go after 2021's biggest misses, spend less time on the classics Security28 Apr 2022 | 10
National Security Agency employee indicted for 'leaking top secret info' Managed to send material from his private email address, it is claimed Security01 Apr 2022 | 31
China thrilled it captured already-leaked NSA cyber-weapon Not now with your mischief, Beijing Security14 Mar 2022 | 22
Anatomy of suspected top-tier decade-hidden NSA backdoor Bvp47 of yore said to have used BPF to conceal comms in network traffic Security23 Feb 2022 | 19
Ex-US intel, military trio were cyber-mercenaries for UAE, say prosecutors Three men charged with breaking export, security laws, agree to deal after infiltrating smartphones with zero-click exploits Security15 Sep 2021 | 22
HPE bags $2bn HPC-as-a-service gig with the NSA Ten-year agreement kicks off in 2022 to help spies do spying HPC01 Sep 2021 | 1
NSA: We 'don't know when or even if' a quantum computer will ever be able to break today's public-key encryption Then again, it would say that Security01 Sep 2021 | 69
Looks like NSA now stands for Not Selecting Azure: US spy agency picks AWS over Microsoft Déjà vu time as $10bn contract award attracts the inevitable bid protest PaaS + IaaS11 Aug 2021 | 13
Ex-NSA leaker Reality Winner released from prison early for 'exemplary' behavior Will be transferred to a halfway house, attorney continues to fight for presidential pardon Security14 Jun 2021 | 15
Snowden was right, rules human rights court as it declares UK spy laws broke ECHR Says privacy and freedom of expression breached, but upholds sending surveillance product to foreign countries Security25 May 2021 | 80
The perils of non-disclosure? China 'cloned and used' NSA zero-day exploit for years before it was made public Check Point says Beijing 'reconstructed' Equation Group's hacking tool long before leak Security23 Feb 2021 | 39
Kremlin hackers are right now exploiting security hole in VMware software to hijack systems, NSA warns So, you know, patch it Security07 Dec 2020 | 17
NSA: We've learned our lesson after foreign spies used one of our crypto backdoors – but we can't say how exactly Senator Wyden puts surveillance nerve-center on blast Security28 Oct 2020 | 90
Top tip, everyone: Chinese hackers are hitting these 25 vulns, so make sure you patch them ASAP, says NSA Plus this Chrome one being exploited in the wild, we note Security20 Oct 2020 | 13
Worried about bootkits, rootkits, UEFI nasties? Have you tried turning on Secure Boot, asks the No Sh*! Agency And have you tried simply asking hackers to not hack? Security16 Sep 2020 | 22
Snowden was right: US court deems NSA bulk phone-call snooping illegal, possibly unconstitutional, and probably pointless anyway Privacy campaigners cheer ruling 7 years in the making Security03 Sep 2020 | 45
This NSA, FBI security advisory has four words you never want to see together: Fancy Bear Linux rootkit From Russia, with love Security13 Aug 2020 | 67
NSA warns that mobile device location services constantly compromise snoops and soldiers It might be best not to ask how the NSA knows this and why it advises most mitigations don’t help Security05 Aug 2020 | 88
It's not every day the NSA publicly warns of attacks by Kremlin hackers – so take this critical Exim flaw seriously GRU crew actively exploit hole – but you patched it months ago, right? Security29 May 2020 | 10
US Congress: Spying law is flawed, open to abuse, and lacking in accountability – so let's reauthorize it Yep, it's NSA Groundhog Day again Security12 Mar 2020 | 9
After blowing $100m to snoop on Americans' phone call logs for four years, what did the NSA get? Just one lead Section 215 more useless than we suspected yet they still want to keep it Security26 Feb 2020 | 34
Remember the Clipper chip? NSA's botched backdoor-for-Feds from 1993 still influences today's encryption debates Enigma We'll laugh at today's mandated holes in the same way we laugh at those from 25 years ago Security27 Jan 2020 | 66
NSA to Congress: Our spy programs don’t work, aren’t used, or have gone wrong – now can you permanently reauthorize them? Senators: Um, no. Security06 Nov 2019 | 57
Uncle Sam demands summary judgment on Snowden memoir: We're not saying it's true, but no one should read it We really needed to take a look before you published Security25 Oct 2019 | 47
American intelligence follows British lead in warning of serious VPN vulnerabilities Now if only they'd accept the Queen back again... Security10 Oct 2019 | 15
Remember the FBI's promise it wasn’t abusing the NSA’s data on US peeps? Well, guess what… Turns out the Feds make the CIA and NSA actually look good Legal08 Oct 2019 | 77
A Nord VPN bug, a(nother) bad Microsoft patch, Zynga data farmed out, and more Roundup Plus, NSA's Ghidra found to contain faulty code Security05 Oct 2019 | 6
NSA asks Congress to permanently reauthorize spying program that was so shambolic, the snoops had shut it down Analysis You never know, we might figure out how not to screw up in future Security16 Aug 2019 | 42
All roads in US cable biz GTT's Brit network seem to lead to Menwith Hill You know, the US spy station with the golf balls Networks13 Aug 2019 | 52
FBI, NSA to hackers: Let us be blunt. Weed need your help. We'll hire you even if you've smoked a little pot in the past Black Hat Now that's what we call a joint task force: Uncle Sam chills out, relaxes recruitment rules on drugs Security08 Aug 2019 | 69
When Harry met celly: NSA hoarder thrown in the clink for 9 years – after taking classified work home for decades Contractor Martin sentenced for squirreling away 50TB of hush-hush files, exploits Security19 Jul 2019 | 37
Years late to the SMB1-killing party, Samba finally dumps the unsafe file-sharing protocol version by default Although you can still use it if you like the thrill of danger Software09 Jul 2019 | 51