CyberScoop | Breaking Cybersecurity News, Public Sector Threats

Voting is open for the 2025 CyberScoop 50 awards!

Click here!

A shelf is seen bare in the frozen foods section of a Whole Foods store on June 11, 2025 in San Rafael, California. United Natural Foods, the primary food distributor to Whole Foods, paused deliveries to Whole Foods stores after a cyberattack crippled its system. Some Whole Foods stores are experiencing empty shelves and freezers. The company said this week that the attack will cost them up to $400 million in lost sales. (Photo by Justin Sullivan/Getty Images)

United Natural Foods loses up to $400M in sales after cyberattack

The food distributor and wholesaler completely shut down its systems upon discovering the attack last month, yet core systems were restored and normal operating capacity returned within…

By Matt Kapko

WASHINGTON, DC – JUNE 17: U.S. Sen. Alex Padilla (D-CA) walks to the Senate Chambers U.S. Capitol on June 17, 2025 in Washington, DC. Padilla has returned to the U.S. Capitol with a bigger security detail and is set to make a speech on the Senate Floor, where he will discuss his removal from a news conference being held by Homeland Security Secretary Kristi Noem after trying to ask a question. (Photo by Kayla Bartkowski/Getty Images)

Senate Democrats seek answers on Trump overhaul of immigrant database to find noncitizen voters

Cybersecurity

By Derek B. Johnson

A worker walks inside of an uranium conversion facility in Iran on March 30, 2005. Stuxnet, a piece of malware reportedly developed by Israel and the U.S. to destroy equipment in the facilities like the one pictured, will be the subject of a forthcoming Congressional hearing. (Photo by Getty Images)

House hearing will use Stuxnet to search for novel ways to confront OT cyberthreats

Cybersecurity

By Derek B. Johnson

Featured on CyberScoop

Popular Stories

(Scoop News Group graphic)

A house full of open windows: Why telecoms may never purge their networks of Salt Typhoon

Experts tell CyberScoop that the U.S. telecom system is just too technologically fragmented to gather a clear picture of threats, and too big to ever fully eject…

By Derek B. Johnson

(Graphic by Scoop News Group)

‘Whatever we did was not enough’: How Salt Typhoon slipped through the government’s blind spots

Seven sources tell CyberScoop that a lack of coordination and miscommunication between federal agencies and the telecommunications industry left critical networks exposed to the Chinese hacking group.

By Tim Starks

Briefcase full of U.S. currency. — Briefcase full of U.S. currency. (Getty Images)

Who needs VC funding? How cybercriminals spread their ill-gotten gains to everyday business ventures

The benefits of cybercrime aren't all flashy cars and watches. Sophos X-Ops researchers discovered it also fuels a far-reaching mix of ordinary, sometimes unremarkable businesses.

By Matt Kapko

Donald Trump — (Graphic by Emma Whitehead / Photo: Gage Skidmore)

Trump and others want to ramp up cyber offense, but there’s plenty of doubt about the idea

In recent months, incoming Trump administration national security adviser Mike Waltz and some lawmakers have suggested that in response to Chinese cyber breaches, the United States needs…

By Tim Starks Mark Pomerleau

A major cybersecurity law is expiring soon — and advocates are prepping to push Congress for renewal

By Tim Starks

Who is sending those scammy text messages about unpaid tolls?

By Matt Kapko

What defenders are learning from Black Basta’s leaked chat logs

By Matt Kapko

Despite challenges, the CVE program is a public-private partnership that has shown resilience

By Cynthia Brumfield

Legal barriers complicate justice for spyware victims

By Tim Starks

Insights

Agencies push for digital transformation amid security challenges

By Scoop News Group

Photo illustration of AI and security.

Want to scale cyber defenders? Focus on AI-enabled security and organization-wide training

By Jay Bhalodia

Data-driven decision-making: The power of enhanced event logging

By Casey Kahsen

Operationalizing zero trust: A practical guide for modern federal agencies

By Scoop News Group

Videos

Why blocking cyber threats is no longer enough

By Scoop News Group

To Catch a Thief: China’s Rise to Cyber Supremacy

By Scoop News Group

Red Hat’s Adam Clater on navigating zero trust’s unknowns

By Scoop News Group

Datadog’s Brian Mikkelsen on unifying zero-trust security efforts

By Scoop News Group

Podcasts

Kemba Walden and Devin Lynch on securing the AI Stack

By CyberScoop Staff

Valence Security’s Yoni Shohet on the growing risk tied to SaaS applications

By CyberScoop Staff

How Full Content Inspection offers a new era of real-time cybersecurity

By Scoop News Group

Intel471’s Will Dixon goes behind the scenes on the DanaBot takedown

By CyberScoop Staff

The Latest

Global network — Global network overlay on world map. (World map courtesy of NASA)

AsyncRAT seeds family of more than 30 remote access trojans

A sign marks the location of the headquarters of the Department of Commerce, home of the National Telecommunications and Information Administration, on April 30, 2025, in Washington, D.C. (Photo by J. David Ake/Getty Images)

House passes bill to formalize NTIA’s cyber role following Salt Typhoon attacks

Citrix offices, California — Citrix offices in Santa Clara, California. (Getty Images)

CitrixBleed 2 beckons sweeping alarm as exploits spread across the globe

This photograph taken on January 13, 2025 in Toulouse shows screens displaying the logo of Grok, a generative artificial intelligence chatbot developed by xAI, the American company specializing in artificial intelligence and it’s founder South African businessman Elon Musk. (Photo by Lionel BONAVENTURE / AFP) (Photo by LIONEL BONAVENTURE/AFP via Getty Images)

Why skipping security prompting on Grok’s newest model is a huge mistake

XBOW’s AI bug-hunter landed a big funding round while dominating HackerOne’s leaderboards. But even its founder says it hasn’t fully replaced the need for humans to be involved in the bug-hunting process. (Image source: Getty)

Is XBOW’s success the beginning of the end of human-led bug hunting? Not yet.

President Donald Trump signs a series of bills during an event in the East Room of the White House on June 12, 2025 in Washington, DC. (Photo by Win McNamee/Getty Images)

New White House cyber executive order pushes rules as code

Workers assemble the Volkswagen ID.4 electric SUV at the VW factory on September 18, 2020 in Zwickau, Germany. Researchers have found a security flaw in the SDK used in the car’s infotainment system. (Photo by Jens Schlueter/Getty Images)

Researchers identify critical vulnerabilities in automotive Bluetooth systems

John Ackerly, CEO and co-founder of Virtru, pictured in 2015. (Photo by Benjamin Lowy/Getty Images)

Virtru secures $50 million investment to advance data-centric security standards

Daniil Kasatkin at the FIBA World Championships in 2019. Kasatkin has been detained in France on suspicion of working for a ransomware group. (FIBA)

French police arrest Russian pro basketball player on behalf of US over ransomware suspicions

The exterior of a Marks & Spencer store photographed on February 18, 2023 in London, England. Four people have been arrested in connection with the cyberattacks on the UK retailer. (Getty Images)

UK arrests four for cyberattacks on major British retailers

A registered nurse tends to a Covid-19 patient in the Intensive Care Unit at Providence St. Mary Medical Center in Apple Valley, California on January 11, 2021. – As Covid-19 tears through southern California, small hospitals in rural towns like Apple Valley have been overwhelmed, with coronavirus patients crammed into hallways, makeshift ICU beds and even the pediatric ward. When AFP visited St Mary hospital in this desert town of 70,000 people this week, palliative care supervisor Kari McGuire said her team were seeing “astronomical numbers of patients who are dying” from the novel coronavirus. (Photo by ARIANA DREHSLER / AFP) (Photo by ARIANA DREHSLER/AFP via Getty Images)

Trump bill will have major impact on health care cybersecurity, experts warn Congress

SimpleImages, Getty Images

Appeals court clears path for El Salvadoran journos to sue spyware maker

Microsoft — (Jeenah Moon/Getty Images)

Microsoft Patch Tuesday addresses 130 vulnerabilities, none actively exploited

Upcoming Events

Jul 29 2025

Webinar: Cloud Security for Mission Resilience

Virtual Event

Aug 19 2025

Agentic AI Government Summit + Jamfest

Waldorf Astoria, Washington, D.C.

Sep 4 2025

EMERGE: Defend and Disrupt

Waldorf Astoria, Washington, D.C.

Sep 9 2025

AI & Tech for Government: Innovation in Action CA

Hotel Alma, San Diego, CA

Sep 18 2025

FedTalks

Waldorf Astoria, Washington, D.C.