Employee screening company discloses breach affecting more than 3 million people.

Summary

By the CyberWire staff

At a glance.

Employee screening company discloses breach affecting more than 3 million people.
Sweden will seek backdoor access to encrypted messaging apps.
Critical RCE flaw discovered in MITRE's Caldera platform.

Employee screening company discloses breach affecting more than 3 million people.

Texas-based employee screening company DISA Global Solutions has disclosed a data breach affecting more than 3.3 million people, SecurityWeek reports. The breach occurred in early 2024 when an "unauthorized third party accessed a limited portion" of the company's environment and exfiltrated data. The company said the breach involved names, Social Security numbers, driver’s license numbers, other government ID numbers, and financial account information.

DISA says it's "unaware of any attempted or actual misuse of any information involved in this incident," and is offering free credit monitoring for affected individuals. SecurityWeek notes that no ransomware groups have claimed responsibility for the incident.

Stop Identity-Based Cybercrime with SpyCloud’s Holistic Identity Threat Protection

Stolen identity data is the hot commodity for cybercriminals. With the full scope of your users’ digital footprints at risk for exposure, traditional account-centric security is no longer enough to protect your business from cyberattacks. SpyCloud helps security teams correlate and automatically remediate individuals' hidden identity exposures from breaches, malware, and phishing across their many online personas. Eliminate identity-based cyber threats and proactively defend against account takeover, fraud, and ransomware with SpyCloud.

Sweden will seek backdoor access to encrypted messaging apps.

The Swedish government is set to propose a bill next month that would force Signal and WhatsApp to create backdoors for law enforcement to access users' messages, Infosecurity Magazine reports. The Signal Foundation's president Meredith Whittaker said Signal will leave the Swedish market if the law passes, stating, "Asking us to store data would undermine our entire architecture and we would never do that."

The bill is supported by the country's law enforcement and security services, with Minister of Justice Gunnar Strömmer stating, "The ability of law enforcement authorities to effectively access electronic communications is crucial." The Swedish Armed Forces opposes the bill, however, saying the law could not be implemented "without introducing vulnerabilities and backdoors that could be exploited by third parties."

Many Voices. One Community.

Join Us at the RSAC 2025 Conference. Join us at RSAC, April 28 - May 1 in San Francisco and gain access to cybersecurity innovators, expert-led sessions, and hands-on workshops. Leave with new strategies, insights, and connections to elevate your cybersecurity journey.

Critical RCE flaw discovered in MITRE's Caldera platform.

Security researcher Dawid Kulikowski has discovered and reported a critical remote code execution vulnerability (CVE-2025-27364) affecting MITRE's Caldera security training platform, the Register reports. The flaw has been assigned a CVSS score of 10.0, and can allow "remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera's Sandcat or Manx agent (implants)." Users are urged to update to the latest version of Caldera as soon as possible.

Notes.

Today's issue includes events affecting Australia, the Democratic People's Republic of Korea, Sweden, and the United States.

Attacks, Threats, and Vulnerabilities

Hackers publish sensitive patient data allegedly stolen from Australian IVF provider Genea (TechCrunch) Genea gets a court injunction after ransomware gang Termite claims to have leaked patient information

How North Korea pulled off a $1.5 billion crypto heist—the biggest in history (Ars Technica) Attack on Bybit didn’t hack infrastructure or exploit smart contract code. So how did it work?

Trends

Ponemon Cybersecurity Report: Insider Risk Management Enabling Early Breach Detection and Mitigation (GlobeNewswire News Room) Insider risk management budgets have more than doubled and are projected to grow further in 2025, as the average annual cost of insider threats reaches...

Products, Services, and Solutions

Advanced SIEM And ITSM Integrations (SecurityBridge) Today we announce the launch of SecurityBridge Security Information Event Management (SIEM) and IT Service Management (ITSM) for SAP.

FedRAMP Authorization for CrowdStrike Falcon® Exposure Management (CrowdStrike) CrowdStrike achieves FedRAMP authorization for Falcon Exposure Management, securing attack surfaces for highly regulated industries in the cloud.

CrowdStrike Expands Leadership in Hybrid Identity Protection (CrowdStrike) Read this press release on CrowdStrike leadership expansion in hybrid identity protection with Falcon Identity Protection for Microsoft Entra ID.

CrowdStrike Falcon® Cloud Security Supported on Oracle Cloud Infrastructure (CrowdStrike) Read this press release on how CrowdStrike Falcon® Cloud Security for OCI unifies code to cloud protection across multi-cloud environments.

CrowdStrike is the First Cloud-Native Cybersecurity ISV to Surpass $1B on AWS (CrowdStrike) CrowdStrike surpasses $1B in AWS Marketplace sales, driving cloud security adoption with its Falcon platform, helping organizations consolidate cybersecurity and streamline procurement.

Legislation, Policy, and Regulation

DOGE must halt all ‘negligent cybersecurity practices,’ House Democrats tell Trump (The Record) The Trump administration should "cease all DOGE activities that create serious cybersecurity vulnerabilities, expose government networks to cyberattacks, and risk disclosures of sensitive and personal information,” Democrats from the House Oversight Committee said in a letter to the White House.

CISA’s AI cybersecurity playbook calls for greater collaboration, but trust is key to successful execution (CyberScoop) As the industry continues to dissect and implement the JCDC playbook, it’s important to take a step back to better understand the resource.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

GovMilSpace (Washington, DC, USA, Mar 10 - 13, 2025) Demystify the future of space technology. In alignment with the SATELLITE Conference & Exhibition, GovMilSpace brings together government and military agencies, the intelligence community, and satellite and space industry partners to explore how private industry can enhance critical missions for the U.S. and its global allies.

Satellite 2025 (Washington, DC, USA, Mar 10 - 13, 2025) For 40+ years SATELLITE has gathered the global space and satellite communities for four immersive days of enterprise, insights, and innovation. This year, with the debut of GovMilSpace, SATELLITE expands its reach to address the needs and priorities of the defense sector.

WICYS 2025 (Dallas and Virtual, Texas, USA, Apr 2 - 5, 2025) WiCyS 2025 is the go-to event for cybersecurity professionals, students, and organizations. The conference is the flagship event to recruit, retain and advance women in cybersecurity.

40th Space Symposium (Denver and Virtual, Colorado, USA, Apr 7 - 10, 2025) Bringing together leaders from commercial, government and military space from around the world, the Space Symposium provides a forum to discuss, address and plan for future achievements in space. The Space Symposium program delivers exclusive networking and engagement opportunities with influential participants in one convenient and extraordinary venue. Space Symposium luncheons and dinners provide additional contact with influential participants.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 02.26.25

At a glance.

Employee screening company discloses breach affecting more than 3 million people.

Sweden will seek backdoor access to encrypted messaging apps.

Critical RCE flaw discovered in MITRE's Caldera platform.

Notes.

Attacks, Threats, and Vulnerabilities

Trends

Products, Services, and Solutions

Legislation, Policy, and Regulation

Events