Critical

Man sentenced for hacking U.S. Supreme Court and government systems

SCM feed for Latest

Overview

Nicholas Moore has been sentenced to one year of probation for hacking into the U.S. Supreme Court's electronic document filing system on multiple occasions over several months. This incident raises concerns about the security of sensitive government systems and the potential for unauthorized access to legal documents. Although the specific details of how Moore gained access haven't been disclosed, his actions demonstrate vulnerabilities in the digital infrastructure of key government institutions. This case serves as a reminder that cybersecurity is a critical issue for all branches of government, as breaches could lead to the exposure of confidential information and undermine public trust in the judicial system.

Key Takeaways

  • Affected Systems: U.S. Supreme Court electronic document filing system
  • Timeline: Ongoing since several months prior to sentencing

Original Article Summary

Nicholas Moore has been sentenced to one year of probation for hacking into the U.S. Supreme Court’s electronic document filing system multiple times over several months.

Impact

U.S. Supreme Court electronic document filing system

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Ongoing since several months prior to sentencing

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Critical.

Related Coverage

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

The Hacker News

NGINX has released updates to address five vulnerabilities, including a significant flaw that has persisted since May 2005. Among these are three memory-related issues that could crash a worker process or potentially allow an attacker to execute arbitrary code, contingent on specific configurations. Additionally, one vulnerability could enable attackers to forge a TLS session, bypassing client certificate checks. These vulnerabilities affect all versions of NGINX since the identified flaw's introduction, making it crucial for users to update promptly. The release of versions 1.30.6 and 1.31.7 on October 14 is a direct response to these security risks, emphasizing the need for users to maintain up-to-date software to protect against exploitation.

Oct 15, 2026

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

The Hacker News

Next.js has rolled out an urgent security patch that addresses two serious vulnerabilities allowing unauthenticated remote code execution (RCE) and a high-severity denial-of-service (DoS) issue. The first RCE flaw is linked to React Server Components, while the second involves librsvg, an open-source library used by Next.js for processing SVG images through the sharp package. This update, released on October 14, is crucial for developers using Next.js, as it can prevent attackers from executing malicious code on affected systems. Users should apply this patch promptly to protect their applications from potential exploitation. The vulnerabilities could have serious implications for any web applications relying on Next.js, making swift remediation essential.

Oct 15, 2026

Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early

The Hacker News

A new wave of cyberattacks is targeting US companies through fake AI products. Attackers are mimicking popular AI software to spread malware, hijack browser sessions, and compromise business accounts. Research from ANY.RUN identified over 1,200 instances of these campaigns between April and October 2026, with a significant portion of the attacks aimed at US businesses. This surge in malicious activity is putting additional strain on Managed Security Service Providers (MSSPs), who are struggling to keep up with the growing threat. Companies need to be vigilant about the authenticity of AI tools they use and ensure they have adequate security measures in place to protect against these deceptive tactics.

Oct 15, 2026

Why AI Confidence Is Not Validation

The Hacker News

Artificial Intelligence (AI) is increasingly being used in digital forensics and incident response, but there are growing concerns about the reliability of these tools. As AI systems become more confident in their outputs, practitioners have not yet established effective methods to verify that information. This lack of governance and validation standards poses a risk, as inaccuracies in AI-generated results can lead to significant missteps in cybersecurity efforts. The gap between AI confidence and human verification could result in uncontained errors that may affect broader systems and organizations. Addressing this issue is crucial for ensuring that AI supports rather than undermines cybersecurity practices.

Oct 15, 2026

India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1

The Hacker News

Starting November 1, 2026, the Indian government will require telecom service providers to display the registered names of callers along with their phone numbers for incoming calls. This new regulation aims to help users identify unknown numbers and reduce the volume of spam and fraudulent calls. The Department of Telecommunications issued a circular to enforce this change, indicating a proactive approach to enhance caller transparency. By making it easier for individuals to recognize who is calling, the government hopes to protect citizens from potential scams and unwanted solicitations. This initiative is part of a broader effort to improve telecommunications security and user experience in India.

Oct 15, 2026

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

The Hacker News

A credential-theft campaign named GhostAction has recently intensified, affecting around 1,900 GitHub accounts. This attack, observed by GitGuardian on October 8 and 9, 2026, targeted over 30,000 repositories linked to approximately 3,000 users and organizations. The attackers aimed to extract sensitive information, specifically 3,174 secrets from public repositories' Continuous Integration (CI) systems. This incident raises significant concerns for developers and organizations using GitHub, as compromised accounts can lead to unauthorized access and potential data breaches. Users are advised to secure their accounts and monitor their repositories for any suspicious activity.

Oct 15, 2026