Watchdog finds most agencies failed to meet CISA cloud security orders, heightening risk of attack

2026-09-23T20:51:36Z•1c0f208ccf7bf24e3594753253bb48765021756411f38fac250ec44e87cbce6a
AI-enabled-cybercrimeCISAChina-aligned-threat-actorChrome-exploitationEvilTokensFBIMicrosoft-vulnerabilitiesRyukShinyHuntersUTA0565Ukraineaccount-takeoverbusiness-email-compromisecloud-securitycritical-infrastructurecyber-policydata-breachfederal-agenciesgovernment-securityphishing-as-a-serviceransomware

What happened

CyberScoop RSS items report widespread federal agency noncompliance with CISA cloud security directives, alleged exposure of FBI personnel data by ShinyHunters, China-aligned exploitation of Chrome and Microsoft vulnerabilities, AI-enabled phishing and token theft through the EvilTokens service, a Ryuk ransomware sentencing, and cybersecurity initiatives targeting critical infrastructure in Ukraine and the United States. The collection reflects significant risks to government, critical infrastructure, identity systems, and cloud security, though several reports concern policy, legal, or uncorม

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
cyberscoop
Record identifier
1c0f208ccf7bf24e3594753253bb48765021756411f38fac250ec44e87cbce6a
Enrichment time
2026-09-23T20:51:36Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.