An authentication-bypass vulnerability allows attackers to access network assets without credentials when SAML is enabled on certain firewalls and enterprise VPNs.
A leak at the Defense Information Systems Agency exposed personal information of government employees, including social security numbers.
Twelve years’ worth of data has blasted off into the Dark Web.
Widespread, unpatched vulnerabilities are just one set of problems uncovered by a Department of Defense audit.
Two samples have already been added to the malware zoo, indicating a new openness from the federal government when it comes to cyber.
The news comes shortly after the DoD was called out for having rampant bugs in its weapons systems.
A record fine and two new compromises kick off the autumn compromise season.
This includes physical fitness aids, applications in phones that track locations, and other devices and apps that could pinpoint and track the location of individuals in active combat zones.
The thief also had a second dataset, including the M1 Abrams maintenance manual, a tank platoon training course, a crew survival course and documentation on improvised explosive device (IED) mitigation tactics.