VulnHub

Real-time Cybersecurity News

FEMA clarifies rules for cybersecurity grant funding

SCM feed for Latest

Overview

FEMA has issued new guidelines regarding the use of federal cybersecurity grant funds by state and local governments. The agency has made it clear that these funds cannot be used to cover membership fees that include bundled cybersecurity or technical services. This decision stems from FEMA's inability to assess the reasonableness of these bundled costs. As a result, local governments must be more careful in how they allocate these funds, focusing on specific cybersecurity needs rather than bundled services. This clarification aims to ensure that federal money is spent effectively and transparently, enhancing the overall cybersecurity posture of state and local governments.

Key Takeaways

  • Affected Systems: Federal cybersecurity grant funds
  • Action Required: Local governments should avoid using federal grant funds for bundled membership fees and focus on specific cybersecurity expenditures.
  • Timeline: Newly disclosed

Original Article Summary

FEMA has clarified that state and local governments are prohibited from using federal cyber grant funds to pay for membership fees that bundle cybersecurity or technical services, as the agency cannot determine the reasonableness of these bundled costs.

Impact

Federal cybersecurity grant funds

Exploitation Status

No active exploitation has been reported at this time. However, organizations should still apply patches promptly as proof-of-concept code may exist.

Timeline

Newly disclosed

Remediation

Local governments should avoid using federal grant funds for bundled membership fees and focus on specific cybersecurity expenditures.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

Linux Tech Segment & Vulnerabilities Galore - PSW #933

SCM feed for Latest

A recent report highlights multiple vulnerabilities affecting various Linux distributions, including Debian, Ubuntu, and Fedora. These vulnerabilities could allow attackers to gain unauthorized access or execute arbitrary code on affected systems. Researchers found that these issues stem from flaws in critical components like the Linux kernel and system libraries. Users and administrators of Linux systems need to prioritize patching their systems to mitigate potential risks. The widespread use of Linux in servers and cloud environments makes these vulnerabilities particularly concerning, as they could lead to significant data breaches or service disruptions.

Jul 2, 2026

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

The Hacker News

This week's security updates reveal a series of vulnerabilities across various systems, including browsers, AI tools, and email services. Researchers discovered that many of these weaknesses stem from small permission gaps and inadequate security checks, which attackers can exploit. Notably, the article mentions the BlueHammer ransomware, which targets businesses by leveraging these types of vulnerabilities. This situation underscores the need for organizations to regularly assess their security measures and patch any identified weaknesses to prevent potential breaches. Overall, the findings serve as a reminder that even seemingly secure systems can harbor significant risks if not properly maintained.

Jul 2, 2026

New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure

SecurityWeek

Hackers have begun exploiting a newly disclosed vulnerability known as CitrixBleed, targeting NetScaler appliances. This vulnerability allows attackers to access arbitrary memory content through HTTP responses, putting sensitive information at risk. The exploitation started almost immediately after the vulnerability was publicly disclosed, indicating a rapid response from malicious actors. Organizations using affected NetScaler devices need to be vigilant, as this could lead to significant data breaches or unauthorized access. It's crucial for companies to take immediate action to safeguard their systems and protect sensitive information from being compromised.

Jul 2, 2026

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The Hacker News

A new malware called Umbrij, linked to the cyber group ToddyCat, is targeting corporate Gmail accounts by exploiting the Google API. According to Kaspersky's recent report, the malware allows attackers to gain stealthy access to email communications, raising significant concerns for businesses that rely on Gmail for their operations. This tactic of compromising access through APIs highlights potential vulnerabilities in how companies manage their email systems. As email remains a primary communication tool for organizations, the implications of such breaches could be severe, resulting in sensitive information leaks and potential financial losses. Companies using Gmail should enhance their security measures to safeguard against this type of attack.

Jul 2, 2026

Researcher Behind 'Exploitarium' Explains Release of Undisclosed Zero-Day Exploits

Infosecurity Magazine

A cybersecurity researcher has released over 30 proof-of-concept exploits without revealing the underlying vulnerabilities first. This action, known as 'Exploitarium,' raises significant concerns within the cybersecurity community as it could enable malicious actors to exploit these vulnerabilities before they are patched. The researcher argues that this approach can pressure vendors to address security flaws more quickly. However, this practice may also put many users and organizations at risk, as they might not be aware of the potential threats posed by these exploits. The implications of this release emphasize the ongoing tension between security research and responsible disclosure, highlighting the need for better communication between researchers and vendors.

Jul 2, 2026

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

SecurityWeek

Researchers have identified that credentials stolen from FortiGate firewalls are being misused in ransomware attacks linked to the INC and Lynx groups. This breach, known as the FortiBleed campaign, has compromised hundreds of thousands of firewall credentials, allowing attackers to launch targeted ransomware operations. This situation poses a significant risk, as organizations relying on FortiGate firewalls may find themselves vulnerable to further exploitation. Companies should take immediate action to secure their devices and monitor for unusual activity. The findings underscore the importance of maintaining strong security practices and regularly updating credentials to mitigate these risks.

Jul 2, 2026