Cyber Security News: CVE Funding, NLRB Breach Allegations, Texas Cyber Command, and More

CVE Program Lifeline and Foundation

• 💡 The CVE program received an 11-month funding extension from CISA, preventing a critical lapse in services.
• 🔑 A new CVE Foundation, a nonprofit, has been established to ensure the program's long-term stability and independence.
• ⚠️ MITER Corporation, which manages the CVE program, is laying off 442 employees due to contract cancellations.

Whistleblower Allegations at NLRB

• 🚨 A federal whistleblower alleges that the Department of Government Efficiency (Doge) caused a security breach at the National Labor Relations Board (NLRB).
• 🔒 The complaint claims Doge disabled security protocols and may have illegally extracted over 10 gigabytes of sensitive data.
• 🔍 Evidence includes screenshots of data transfers and login attempts from foreign IP addresses, though the White House stated Doge was transparent.

State and Platform Security News

• 🚀 Texas is moving forward with establishing its own Cyber Command through legislation passed by the Texas House, backed by $135 million.
• 💥 The hacker marketplace Breach Forums was reportedly taken down again, with a group called Dark Storm Team claiming responsibility.
• 🏛️ A watchdog group alleges the US government used encrypted Signal messages to evade transparency laws during military operations, potentially violating the Federal Records Act.
• 📈 The SEC Chair revealed a 2016 hack of the Edgar system, which may have enabled illicit stock trading.

Malware, Updates, and Exam Prep

• 🎯 A new remote access Trojan, Resolver Rat, is targeting the healthcare and pharmaceutical sectors globally through phishing emails.
• 💻 Microsoft warned of blue screen crashes on Windows 11 (version 24H2) following recent updates, with a fix being rolled out.
• 🎓 The CertByte segment featured a breakdown of a question for the EC-Council Certified Ethical Hacker (CEH) exam, focusing on DNS poisoning and 'pharming'.
• 🛠️ Key study tips for the CEH exam include mastering Nmap commands and understanding various social engineering techniques.