According to a whistleblower report, Elon Musk’s “Department of Government Efficiency” (DOGE) team at the Social Security Administration allegedly uploaded the sensitive personal information of over 300 million Americans to a vulnerable cloud server. The data, including addresses and birth dates, could be at risk of being leaked or hacked, potentially leading to widespread identity theft and other consequences. The whistleblower, the agency’s chief data officer, claims DOGE personnel violated security protocols and federal privacy laws. This incident raises concerns about the Trump administration’s influence and the potential for drastic cuts to federal programs, especially considering Musk’s history of questioning the agency’s legitimacy.
Read More
Democratic-led states are inadvertently sharing drivers’ data with ICE, officials say, and that’s a problem we need to unpack. The core issue, it seems, is that state agencies, the ones entrusted with our precious personal information, are often better at gathering it than they are at keeping it safe. It’s like they’re good at building the house, but forget to install a proper lock on the front door. We’re talking about driver’s license data here, the kind of info that can reveal a lot about a person: their address, their identity, and potentially, their immigration status.
It’s tempting to think this is a simple, partisan issue, but the reality is likely much more complex.… Continue reading
House Minority Leader Hakeem Jeffries is demanding a criminal investigation into the National Archives after the agency accidentally released an unredacted copy of Rep. Mikie Sherrill’s military record, who is currently running for governor. The National Archives, now under the purview of Secretary of State Marco Rubio, has apologized for the error, attributing it to a technician’s mistake when responding to a Freedom of Information Act request. The agency has stated it will provide Sherrill with free credit-monitoring services and review its procedures to prevent future breaches, acknowledging the rarity of such incidents and the importance of safeguarding sensitive information.
Read More
‘Unrestrained’ Chinese Cyberattackers May Have Stolen Data From Almost Every American. Well, it’s a bit unsettling, isn’t it? The news is painting a picture of a massive cyber operation, a digital siege really, launched by China-backed actors. They’ve allegedly infiltrated networks across the globe, hitting over 80 countries and, disturbingly, potentially grabbing data on almost every single American.
The scope of this alleged attack, codenamed “Salt Typhoon,” is frankly, alarming. We’re not just talking about a few compromised websites here and there. The hackers apparently targeted a vast array of sectors. From our everyday essentials like telecom and transportation to government entities and even military infrastructure, it seems no one was truly safe.… Continue reading
A whistleblower alleges that former senior Trump administration officials at the Social Security Administration copied the names, birthdays, and Social Security numbers of over 300 million Americans to a private, less secure cloud environment. This data copy, created within the agency’s existing cloud infrastructure, is accessible to other former Department of Government Efficiency (DOGE) employees and lacks sufficient security measures. Career cybersecurity officials expressed serious concerns about the risks, including the potential need to reissue Social Security numbers. Despite these warnings, the data transfer proceeded after the Supreme Court granted DOGE team members temporary access to sensitive SSA data.
Read More
According to a whistleblower complaint, the Department of Government Efficiency (DOGE) placed the personal data of millions of Americans, including Social Security numbers, on a vulnerable server in June. The complaint, filed by the Social Security Administration’s chief data officer, Charles Borges, alleges multiple violations and a “substantial and specific threat to public health and safety.” The database, known as Numident, contains sensitive information making it a target for nefarious actors. Despite warnings of “catastrophic impact” and a high-risk assessment, the data was moved to a private cloud server with limited oversight.
Read More
Cybersecurity experts are cautioning the public about a recent breach of a US state’s National Guard network by the Salt Typhoon cyber espionage group. The DoD revealed the group maintained access for almost a year, potentially accessing sensitive military and law enforcement data, including administrator credentials and network diagrams. This data theft included configuration files for critical national infrastructure organizations and state government agencies, raising concerns about potential follow-on attacks. The incident, part of a larger campaign linked to Chinese-backed hackers, highlights the group’s proficiency and the urgent need for improved cybersecurity measures, including Zero Trust adoption and breach containment strategies across all US government networks.
Read More
On July 17, Ukrainian military intelligence (HUR) reportedly launched a cyberattack against Gazprom, Russia’s state-owned energy giant, causing significant disruptions. The attack allegedly targeted systems used by Gazprom and its subsidiaries, which Ukraine claims support the Russian war effort. The operation resulted in the destruction of data, the installation of damaging software, and the disabling of internal systems for thousands of administrators across hundreds of subsidiaries. The Kyiv Independent could not independently verify these claims, and neither Gazprom nor Russian authorities have commented publicly.
Read More
Cybernews researchers uncovered 30 datasets containing 16 billion compromised login credentials, a figure exceeding the global population and suggesting multiple account compromises per individual. This massive collection of data, likely gathered from numerous breaches over time by infostealers, was briefly publicly accessible before being discovered. While the current location of the data remains unknown, the incident underscores the growing need for robust cybersecurity practices. Experts recommend password changes, unique credentials across platforms, and the use of password managers or multi-factor authentication to mitigate future risks.
Read More
Governor Newsom’s accusation that former President Trump handed over Californians’ personal information to Homeland Security highlights a serious breach of privacy. This alleged action directly contradicts California’s stringent privacy laws, placing the personal data of millions at risk. The scale of this potential violation is immense, impacting not only Californians but also residents of other states, raising fundamental questions about the balance of power between state and federal governments.
The sheer volume of personal data potentially compromised is alarming. This isn’t just about names and addresses; it could encompass sensitive financial information, medical records, and even political affiliations – all highly vulnerable to misuse and exploitation.… Continue reading
Democratic States Inadvertently Share Driver Data with ICE: Analysis
Democratic-led states are inadvertently sharing drivers’ data with ICE, officials say, and that’s a problem we need to unpack. The core issue, it seems, is that state agencies, the ones entrusted with our precious personal information, are often better at gathering it than they are at keeping it safe. It’s like they’re good at building the house, but forget to install a proper lock on the front door. We’re talking about driver’s license data here, the kind of info that can reveal a lot about a person: their address, their identity, and potentially, their immigration status.
It’s tempting to think this is a simple, partisan issue, but the reality is likely much more complex.… Continue reading