Investigation of banking hack leads to arrests in Germany, Brazil

Germany’s federal police agency, the BKA, said three suspects were picked up in Europe and charged with fraud, and Brazil’s federal police said four others were arrested on similar charges.

therecord.media

France investigates tax authority breach after hacker claims 600,000 victims

French authorities confirmed that someone gained unauthorized access to systems at the Directorate General of Public Finances in late June after stealing or misusing someone’s identity.

therecord.media

Flock tightens privacy controls amid scandals over officer abuse

All Flock Safety customers will be required to adopt its "Audit Assistance" feature for tracking abnormal uses, and the company says it will hold license plate data for only seven days in most cases.

therecord.media

New Mirai variant adds stealth capabilities to notorious botnet code

Beyond Mirai’s usual functions, the new code features include encrypted communications with command-and-control servers and a “sniffer” that looks for default access credentials.

therecord.media

Trump taps cyber firms to go on offensive against criminals

The Trump administration will allow private companies to launch attacks on cybercrime organizations, the White House announced.

therecord.media

Germany moves to give spy agencies hacking and sabotage powers

Germany’s cabinet approved legislation that would let its intelligence agencies hack foreign systems, sabotage adversaries’ supply chains and feed false information to extremists inside Germany, in th...

therecord.media

FBI: Hackers using social engineering to breach accounts and steal explicit content

Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.

therecord.media

Three intrusions at UK criminal records office went undetected for two years

Unread antivirus alerts and an unpatched content management system exposed Britain's ACRO to three separate data breaches, according to a reprimand notice.

therecord.media

CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign

Researchers disclosed the bug to Microsoft after examining a long-running campaign by North Korean hackers to exploit the job application process.

therecord.media

Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery

This month’s update features about five times the volume of patches Microsoft was shipping in a typical month before AI-assisted vulnerability discovery took hold.

therecord.media

NSA installs DHS lawyer as new general counsel

Kerianne Tobitsch, who most recently served as a senior lawyer at the Homeland Security Department, is the NSA's new general counsel, sources told Recorded Future News.

therecord.media

Ransomware group hijacks hospital system’s Facebook page amid ongoing cyberattack fallout

The hackers claimed to have exfiltrated 6 terabytes of data, including highly sensitive health information like records related to sexual assault, mental health, abortions and sexual harassment incide...

therecord.media

Cyberattack on logistics giant Ceva hits retailers and Steam customers across Europe

Operations at eight European warehouses belonging to France's CEVA Logistics have reportedly been disrupted by a cyberattack, and several other companies are feeling the effects.

therecord.media

Kids’ online safety bill faces dim prospects of passage this session despite progress

Proponents of the Kids Online Safety Act are cheering recent progress but acknowledge a long road ahead for legislation that, despite mounting political pressure, may be difficult to pass this session...

therecord.media

Poland uncovers second heat plant cyberattack that went hidden for months

The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.

therecord.media

Water utilities group partners with DEF CON offshoot for Water Watch Center

The National Rural Water Association and a group of cybersecurity experts have formed a program to help cash-strapped utilities face the increase in threats to their systems.

therecord.media

US cyber ambassador nominee Cassady confirmed in Senate

NTIA official Adam Cassady becomes the second person confirmed to be the State Department's ambassador-at-large for cyber policy.

therecord.media

New Mexico judge orders Meta to pay $567 million in kids online safety case

The money will be used to create a fund to mitigate social media harms, including by carving out $420 million for treatment for New Mexico youth who have been hurt on the platforms.

therecord.media

Military device manufacturer discloses cyber incident to SEC

IEH Corporation — which produces specialized products used in military satellites, missiles and fighter jets — said it discovered a cyberattack on Tuesday and immediately tried to contain it.

therecord.media

Irregular, firm behind AI hacking incidents, won't say if there were more

A spokesperson said Irregular’s investigation into what happened with Anthropic, OpenAI and Meta's AI models was ongoing and that they could not “go into further details.”

therecord.media

French rugby club Stade Français restores systems after cyberattack, probes data leak

The club said Thursday that it had already restored its IT environment from clean backups, allowing operations to continue normally. It added that its ticketing platform and online store were not affe...

therecord.media

State Department says Trump raised cyber scam compound issue with Xi

President Donald Trump has talked with Chinese President Xi Jinping about Southeast Asian scam compounds, a State Department official told senators at a hearing on the transnational issue.

therecord.media

Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigate

North Carolina Ports is recovering from a cyberattack after its IT system was “hacked by an outside actor or group,” requiring a switch to manual processing of operations.

therecord.media

Republic of Georgia alleges foreign disinfo campaign sought to scare off Russian tourists

Georgia's State Security Service is investigating whether foreign entities were spreading fabricated stories claiming that Georgians were mistreating Russian tourists.

therecord.media

Canadian man pleads guilty to Snowflake hacks that led to 165 breaches

A 26-year-old from Ontario faces as many as 32 years in prison after pleading guilty to fraud, identity theft and conspiracy charges related to the 2024 hacks of cloud platform Snowflake.

therecord.media

Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents

Water utilities in at least 12 states have reported cyberattacks on their operational technology, as the scope of a campaign allegedly linked to Iranian hackers continues to grow.

therecord.media

Anthropic AI agent faked identities, phished real developers in UK government hacking test

An artificial intelligence agent built by Anthropic independently planted malicious code in a real software project and sent phishing emails to developers during a U.K. government security evaluation,...

therecord.media

Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence

As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to a map of the routes its forces would take.

therecord.media

Russian businesses erase Durov-linked products after 'terrorist' designation

The designation, announced last week, came a day after Russia's Federal Security Service (FSB) charged Durov with aiding terrorist activity and said it would seek to place him on an international want...

therecord.media

CISA warns of spike in attacks on water systems as Minnesota incidents probed

The Cybersecurity and Infrastructure Security Agency said in a public alert on Thursday that facilities should “remove publicly exposed PLCs and other operational technology (OT) from the internet as ...

therecord.media