ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Enabled Intelligence”

19 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 1525Ransomware 1269Industry 1115Malware 1099Policy & legal 894Exploit / PoC 813Threat actor 662Phishing & fraud 596Data breach 575AI tools & infra 210AI safety & security 150AI industry 104Tools 96Advisory 69
SeverityAllcritical 4497high 1710medium 1293low 1322info 571

CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

CIA deputy director says cyber operations built the intelligence picture enabling US forces to capture Nicolás Maduro in Operation Absolute Resolve.

CIA Deputy Director Michael Ellis said at the Billington Cybersecurity Conference that cyber operations built the intelligence picture that let US special operations forces locate and apprehend Nicolás Maduro within four minutes of landing during Operation Absolute Resolve. He cited the elevation of the Center for Cyber Intelligence to a full mission center as key to aligning resources around the cyber mission. The agency also created a Directorate of Mission Systems and cut its technology acquisition cycle from two to three years to a six-month target, completing more than 400 purchases within that period. Ellis said AI brings unprecedented speed and scale to cyber operations and analysis.

CyberScoop · 8d agoPolicy & legal 2 sources

FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

FBI officials said AI is accelerating adversary capabilities while its new cyber strategy emphasizes continuous patching, cyber hygiene, and AI-enabled defense.

At the Billington CyberSecurity Summit and ahead of a new FBI cyber strategy, deputy assistant director Jason Bilnoski said AI is boosting the speed and capability of both criminal and nation-state attackers, while stressing that basic controls like MFA would still prevent most attacks. Colleen Ferranti urged a shift from quarterly Patch Tuesday cycles to continuous, risk-based patching as AI accelerates vulnerability discovery. The strategy pledges AI-enabled triage, malware analysis, attribution support, agentic AI adoption, expanded Computer Network Operations, ICS Coordinators in every field office, and a pledge on victim relief and privacy.

CyberScoop · 8d agoPolicy & legal

Srsly Risky Biz: Trump's Private Hacker Memo Is the Right Idea

A Trump presidential memo directs DHS to authorize vetted private-sector hackers to conduct cyber operations against foreign cybercriminal groups (CE-TCOs).

A presidential memorandum directs the Department of Homeland Security to establish a program authorizing private companies to conduct cyber surveillance and cyber effects operations against Cyber-Enabled Transnational Crime Organisations (CE-TCOs). Participating companies must pass vetting, obtain government approval before operations, and post a USD $1 million bond. The accompanying fact sheet cites more than USD $20.8 billion in US losses to cyber-enabled crime in 2025. Critics worry about accidental escalation if operations touch foreign government systems.

Risky Business News · 28d agoPolicy & legal1

Trump turns to private sector in offensive hacking operations memo

Trump signed a national security memorandum authorizing vetted private companies to conduct offensive cyber operations against transnational criminal organizations under federal oversight.

The memorandum creates a federal coordination center program authorizing 'Participating Companies' to conduct Cyber Surveillance Operations and Cyber Effects Operations against foreign cyber-enabled transnational criminal organizations. Participating firms must contract with the Justice Department or Department of Homeland Security, undergo vetting, and comply with existing laws including the Computer Fraud and Abuse Act. The White House cited sustained fraud and cyber-enabled campaigns from TCOs as justification, building on a March fraud-focused executive order. Experts including Veracode co-founder Chris Wysopal called it a major shift in U.S. cyber policy, though it stops short of broader 'hack back' proposals.

CyberScoop · Aug 13, 2026Policy & legal1

White House bans foreign-made equipment for power generation over cyber backdoor concerns

Trump executive order bans acquisition of foreign-made bulk-power system equipment over cyber backdoor and supply-chain concerns for US electricity infrastructure.

The White House issued an executive order declaring foreign-made bulk-power system electric equipment an "unusual and extraordinary threat," banning its acquisition or installation in the US. The order covers technology managing transmission lines rated at 69,000 volts or higher, substations, control rooms, power generating stations, reactors, and associated remotely accessible software and firmware. It follows recent cyberattacks on water utilities in at least 12 states, malicious activity targeting over 100 internet-exposed water and wastewater systems, and an NSA/FBI advisory on an AI-powered threat to operational technology. The Defense, Commerce, and Energy Departments have 120 days to create rules, identify countries warranting scrutiny, and inventory at-risk equipment.

The Record · 20d agoPolicy & legal

US Authorizes Private Cyber Firms to Hack Transnational Criminal Networks

Trump signed a national security memorandum letting vetted private US cybersecurity firms run government-approved offensive cyber operations against transnational criminal organizations.

The August 13 memorandum creates a program managed by the National Coordination Center covering Cyber Surveillance Operations and Cyber Effects Operations against Cyber-Enabled Transnational Criminal Organizations, explicitly excluding entities that are parts of foreign governments. DOJ and DHS executive directors must co-approve every operation in writing, with extra authorization for operations raising laws-of-armed-conflict questions. Participating firms must pass vetting, annual evaluations and hold a $1 million bond or escrow. Operating procedures are due within 60 days, and the unresolved CFAA exemption question is addressed by requiring direct government control.

Security Affairs · Aug 14, 2026Policy & legal

Treasury sanctions alleged Iranian hackers as part of ‘economic D

US Treasury sanctioned four Iranians linked to MOIS-directed hacks that compromised and exfiltrated data from US critical infrastructure, energy, defense, and financial targets.

The Treasury Department designated four Iranian individuals over alleged hacking and cybertheft against US companies in energy, defense, healthcare, IT, and financial sectors since at least late 2023, as part of an 'economic D-Day' sanctions package. It is the second action in weeks against the group, following an indictment of cybercriminals affiliated with Tehran's Mabna Institute; leadership includes Behzad Mesri, first sanctioned in 2018, and the attacks are described as directed by the Ministry of Intelligence and Security (MOIS). Treasury also expanded secondary-sanction categories across digital assets, technology, gold, aviation, and shipping, and noted some group members pursued personal enrichment, including targeting Iranian companies.

CyberScoop · 22d agoPolicy & legal

Norway considers ban on camera-enabled wearable ‘pervert glasses’

Norway's government is weighing bans on camera-enabled smart glasses and facial recognition in public to protect privacy.

Norway's digital minister Karianne Tung said the government is considering regulating or banning camera-enabled wearables such as Meta and Snap smart glasses over privacy concerns. Potential measures may include banning facial recognition of other people in public places. The government plans to set up an expert group to advise on better protecting privacy rights amid a trend of combining AI with cameras and microphones in everyday devices.

TechCrunch · Security · 15d agoPolicy & legal

White House authorizes private US companies to hack foreign criminal networks

Trump memorandum authorizes vetted private US companies to conduct government-supervised offensive cyber operations against foreign criminal networks.

The National Security Presidential Memorandum signed August 12 lets vetted private companies run offensive cyber operations against transnational criminal organizations behind ransomware, phishing and sextortion, under US government oversight. The Homeland Security Task Force's National Coordination Center, led by DOJ and DHS executive directors, must give written approval for both Cyber Surveillance Operations and Cyber Effects Operations. Participating companies must post a $1 million bond or escrow, undergo annual review, and notify authorities if they unintentionally target US persons or systems.

Help Net Security · Aug 13, 2026Policy & legal

OFAC Sanctions Chinese Scam Platform Xinbi Guarantee

US Treasury's OFAC sanctioned Chinese scam-platform Xinbi Guarantee, which processed $24bn+, and froze $52.8m in linked cryptoassets.

OFAC sanctioned Xinbi Guarantee, a Chinese-language marketplace connecting Southeast Asian scam centers and transnational crime syndicates to merchants offering financial services, technology and crypto exchange. Treasury estimates over $24bn processed since 2022, while TRM Labs estimates over $36bn, with daily inflows nearly doubling between May and December 2025. Two supporting entities were also sanctioned: SafeW Technology (Singapore) and Anwen Technology (Cambodia, maker of XinbiPay). The US Secret Service and Elliptic froze $52.8m in linked cryptoassets, and the marketplace now appears offline with its Telegram channels deleted.

Infosecurity Magazine · 7d agoPolicy & legal1

You don’t have to join the hack-back program to inherit its risk

A new US presidential memorandum creates a vetted private hack-back program, leaving participating vendors and their customers with untested legal liability and collateral risks.

The August 12 National Security Presidential Memorandum directs the National Coordination Center, run jointly by DOJ and DHS, to approve covert surveillance and disruptive Cyber Effects Operations by vetted private companies, with a forfeitable bond of at least $1 million required as a contract condition. The analysis argues the criminal shield rests on an untested reading of the CFAA exemption at 18 U.S.C. 1030(f), with no civil safe harbor, no state-law preemption and no foreign-law protection. Non-participating organizations can still inherit risk through shared infrastructure collateral damage, lack of customer disclosure, Lloyd's bulletin Y5381 state-backed attack exclusions, and threat-intelligence pipelines feeding offensive proposals.

CSO Online · 1d agoPolicy & legal

NIST wants to overhaul its vulnerability database for the AI age

NIST issued a Federal Register RFI seeking public input on overhauling the National Vulnerability Database for AI-scale, machine-consumable security data.

NIST published a request for information arguing the National Vulnerability Database must adapt as LLMs increasingly find and exploit vulnerabilities at machine scale. The RFI seeks input on integrating automation into vulnerability reporting, faster dissemination to defenders, and transparency and auditability in AI-driven decisions. It follows the White House-backed Gold Eagle clearinghouse at Treasury and the VINCE program with Carnegie Mellon's Software Engineering Institute for AI-discovered vulnerability reports.

CyberScoop · Aug 11, 2026Policy & legal

FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors

The FBI published its first-ever Cyber Strategy on September 9, outlining four pillars for investigating and disrupting cyber threat actors and supporting victims.

The FBI's Cyber Strategy, published September 9, defines four pillars: investigate and impose costs on cyber adversaries, support victims, expand partnerships, and enhance the agency's cyber capabilities. It reflects a broader US shift toward proactive disruption, building on an August memorandum signed by President Trump authorizing collaboration with private firms on offensive cyber operations. The strategy includes expanding the Industrial Control Systems Coordinator program to every field office and deploying AI-enabled tools for triage, malware analysis, and attribution.

Infosecurity Magazine · 7d agoPolicy & legal

Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups

Trump White House memo directs NCC to build a program within 60 days authorizing vetted U.S. companies to conduct cyber surveillance and effects operations against foreign criminal groups.

A new White House memorandum instructs the National Coordination Center to establish, within 60 days, a program letting vetted private-sector companies, under federal oversight, conduct cyber surveillance operations (accessing sensitive data without authorization) and cyber effects operations (disruption, degradation, or destruction) against foreign Transnational Criminal Organizations. Targets are groups conducting cyber-enabled crime against U.S. government, persons, or interests that are not institutionally part of a foreign government. Companies must stop operations exceeding approved parameters, run minimization procedures, and alert the NCC, which notifies the Department of Justice. The fact sheet cites an estimated $20.8 billion in reported U.S. consumer losses to cyber-enabled crimes, and experts note legal and security risks since existing laws prohibit private companies from offensive cyber without court authorization.

The Hacker News · Aug 15, 2026Policy & legal

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026

Singapore, Malaysia, and Thailand all tightened cyber compliance in 2026, mandating continuous monitoring and rapid incident reporting for critical infrastructure.

Singapore's CSA issued the Cybersecurity Code of Practice 2026 for Critical Information Infrastructure on 29 July 2026, adding board cyber-resilience duties, annual training, and controls on Interconnected Systems, with most obligations effective by 29 July 2027. Malaysia's Cyber Security Act 2024 requires NACSA-licensed providers, audits, and fast incident notification, with fines up to RM500,000 and up to ten years' imprisonment. Thailand's NCSA cloud security standard has been enforced since 10 September 2026, with a Website Security Standard effective 16 September 2026. The vendor article argues detection speed has become a compliance metric driving demand for real-time threat intelligence.

Cyble · 3h agoPolicy & legal

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

U.S. Treasury sanctioned nearly 60 Iran-linked entities, including MOIS-affiliated Mabna Institute hackers behind breaches of U.S. critical infrastructure and millions in crypto theft.

The U.S. Treasury launched Operation Economic Outcast, designating nearly 60 Iran-linked entities, individuals, and vessels across nuclear, missile, oil, cyber, and digital asset networks. Five sanctioned individuals are members of the Tehran-based Mabna Institute indicted last week; three allegedly breached and exfiltrated data from U.S. energy, defense, healthcare, IT, and financial organizations since late 2023. TRM Labs traced roughly $16.8 million across 30 wallets tied to the members, and the State Department announced a reward of up to $10 million. The action follows Iranian hacking of FBI Director Kash Patel's email and attacks on over 30 U.S. water and wastewater utilities.

The Hacker News · 22d agoPolicy & legal in the wild

Trump taps cyber firms to go on offensive against criminals

Presidential memorandum allows vetted private companies to conduct offensive cyber operations against transnational cybercrime with advance DOJ and DHS approval.

A presidential memorandum released Wednesday lets vetted US companies partner with the Justice and Homeland Security departments on offensive operations and surveillance targeting transnational cybercrime, fraud and predatory schemes, with written pre-approval required for every operation. Operations may not cause loss of life or rise to the level of use of force or armed attack under international law. Participating firms face penalties of at least $1 million for contract violations, must disclose all contractual relationships, and face annual evaluation, while agencies have two months to develop participation standards. The move builds on a March executive order; the White House says Americans reported $20.8 billion in cyber-related losses last year.

The Record · Aug 13, 2026Policy & legal

New York Seizes a Dozen Celebrity Deepfake Websites

Manhattan DA seized 12 domains hosting nonconsensual celebrity deepfake videos depicting about 1,200 victims, the largest such takedown to date.

The Manhattan District Attorney's Office seized 12 domains used for sharing and selling nonconsensual deepfake sexual videos, depicting around 1,200 people, mostly women, including influencers, politicians, and celebrities. The seizures under New York criminal procedure law represent the largest takedown of explicit deepfake websites to date, aided by the US Take It Down Act. Much of the content appeared to be reposts from the MrDeepFakes platform, and investigations into operators and uploaders are ongoing.

WIRED · Securityupdated · 2d agofirst · 2d agoPolicy & legal 2 sources

Retail theft bill spurs ‘very large and very dangerous’ surveillance fears

The Combating Organized Retail Crime Act advances toward Senate attachment to the defense bill, drawing ACLU warnings of expanded ICE surveillance powers.

The Combating Organized Retail Crime Act (CORCA) passed the House 348-60 in June, and Senate supporters including Chuck Grassley are pushing to attach it to the annual defense policy bill. The bill would create an Organized Retail and Supply Chain Crime Coordination Center within ICE's Homeland Security Investigations, add criminal penalties for laundering stolen-goods proceeds with a $5,000 charging threshold, and broaden data sharing with retailers. The ACLU, NAACP LDF, and allied groups warn the vaguely drafted provisions would effectively grant DHS access to retail surveillance feeds such as cameras and license plate readers, while industry backers say it only enhances existing information sharing and could help fight cyber-enabled crime.

CyberScoop · 27d agoPolicy & legal1