Government security news

Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evade detection.

Overview On July 27, 2026, JetBrains published a security advisory for CVE-2026-63077 , a critical unsafe deserialization vulnerability affecting JetBrains TeamCity . An attacker who can reach a TeamCity server over HTTP or HTTPS can exploit the agent polling protocol without credentials and execute operating system commands with the privileges of the TeamCity server process. JetBrains reported no known active exploitation when it disclosed the vulnerability. However, on August 5, 2026, CISA added CVE-2026-63077 to its Known Exploited Vulnerabilities (KEV) catalog, confirming exploitation in the wild. Our analysis finds that a vulnerable TeamCity server creates a permissive XStream allowlist. This allowlist is intended to restrict which Java classes can be deserialized when servicing unauthenticated agent requests. However, this allowlist incorrectly adds TeamCity protocol classes without removing XStream's existing default permissions. This introduces an unsafe deserialization issue. A patched TeamCity server remediates this by adding NoTypePermission.NONE before the TeamCity allowlist, which removes the default permissions and makes the allowlist exclusive. Rapid7 Labs has verifi

The UK’s National Cyber Security Centre wants network device makers to improve forensic observability

The National Cyber Security Centre has released a detailed framework to assist with incident response and recovery

US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment

Government organizations are targeted by attackers who know agencies cannot afford disruption to public services

US government agencies have until July 19 to patch two critical Fortinet vulnerabilities

The UK government is warning of the potential impact of catastrophic cyber-attacks

The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review