The Record
@therecordmedia.bsky.social
📤 1854
📥 21
📝 1050
Covering the world of cyber and intelligence from every angle.
Pakistan-linked hackers infected Indian government organizations and universities with malware designed to take screenshots, monitor clipboard activity and enable remote desktop access
therecord.media/pakistan-lin...
loading . . .
Pakistan-linked hackers target Indian government, universities in new spying campaign
The campaign has been attributed to APT36, also known as Transparent Tribe, a long-running threat actor accused of spying on Indian government bodies, military-linked organizations and universities.
https://therecord.media/pakistan-linked-hacking-group-targets-indian-orgs
2 days ago
0
0
0
The Paris prosecutor's office is investigating a cyberattack on France's national postal service that was claimed by a pro-Russian hacker group
therecord.media/pro-russia-h...
loading . . .
Pro-Russian hackers claim attack on French postal service operator
France’s national postal service La Poste said on Friday that operations had been restored following a distributed denial-of-service (DDoS) attack that began earlier in the week.
https://therecord.media/pro-russia-hackers-claim-attack-la-poste
9 days ago
0
1
1
The SEC said cryptocurrency firms stole $14 million from investors through schemes that involved charging fees when money was withdrawn and wiring funds to overseas banks and crypto wallets
therecord.media/sec-sues-cry...
loading . . .
SEC sues crypto firms for defrauding investors out of $14 million
SEC lawyers said in a 29-page complaint that the companies ran “investment clubs” on WhatsApp that brought in users from advertisements on social media.
https://therecord.media/sec-sues-crypto-firms-defrauding-investors-14-million
12 days ago
0
2
0
Researchers said they observed a hacking group attempting to lure senior Russian military officers to download malware using a variety of phishing emails
therecord.media/cyber-spies-...
loading . . .
Cyber spies use fake New Year concert invites to target Russian military
The campaign surfaced earlier in October after researchers at the New York-based cybersecurity firm Intezer identified a malicious XLL file uploaded to VirusTotal, first from Ukraine and later from Ru...
https://therecord.media/cyber-spies-fake-new-year-concert-russian-phishing
13 days ago
0
3
2
A California federal judge on Friday declined to stay an order preventing the NSO Group from using WhatsApp infrastructure to mount spyware attacks
therecord.media/judge-rules-...
loading . . .
Judge rules that NSO cannot continue to install spyware via WhatsApp pending appeal
NSO Group had sought to stay the order pending a decision on its appeal in the case, which centers on allegations that it targeted 1,400 WhatsApp users with its powerful zero-click Pegasus spyware in ...
https://therecord.media/judge-rules-nso-cannot-continue-whatsapp-spyware
13 days ago
0
1
3
Danish authorities accused Russia-linked hacker groups of launching a destructive cyberattack on a water utility in 2024 and a series of DDoS attacks on Danish websites ahead of elections
therecord.media/denmark-summ...
loading . . .
Denmark summons Russian ambassador over alleged cyberattacks on water utility, elections
Russia’s ambassador to Copenhagen, Vladimir Barbin, confirmed to Russian state media on Friday that he had been called to the Danish foreign ministry, but rejected the accusations as unfounded.
http://therecord.media/denmark-summons-russian-ambassador-cyberattack-elections
16 days ago
0
1
0
A Texas judge issued a temporary restraining order to prevent Hisense from collecting state residents’ viewing habits while a lawsuit proceeds
therecord.media/hisense-orde...
loading . . .
Smart TV manufacturer ordered to stop collecting viewer data while court case proceeds in Texas
The first-of-its-kind temporary restraining order bars Hisense from using automated content recognition (ACR) technology to collect and use, share or sell Texans’ data.
https://therecord.media/hisense-ordered-to-stop-data-collection-texas-lawsuit
16 days ago
0
1
0
Kirsten Davies, a former cyber chief at companies including Unilever and Estée Lauder, was confirmed as the Pentagon's new chief information officer
therecord.media/senate-confi...
loading . . .
Senate confirms new Pentagon CIO
Kirsten Davies was confirmed for the role, along with about 100 other nominees across federal agencies, in a 53-43 vote following a Republican-led rules change that lets tranches of senior personnel g...
https://therecord.media/senate-confirms-new-pentagon-cio
16 days ago
0
0
0
A newly identified group called LongNosedGoblin was seen infecting Southeast Asian government networks over the last year
therecord.media/china-linked...
loading . . .
New China-linked hacker group spies on governments in Southeast Asia, Japan
The group, LongNosedGoblin, has been active since at least September 2023 and was uncovered after researchers detected new malware strains inside the network of a Southeast Asian government last year.
https://therecord.media/china-linked-hacker-group-spied-on-asian-govs
17 days ago
0
0
0
Researchers said North Korean hackers have focused its efforts in 2025 on a smaller number of cryptocurrency attacks with higher payouts
therecord.media/over-3-billi...
loading . . .
Over $3.4 billion in crypto stolen throughout 2025, with North Korea again the top culprit
Of the $3.4 billion in crypto stolen from January to December, Chainalysis attributed at least $2.02 billion to North Korean hackers.
https://therecord.media/over-3-billion-crypto-stolen-2025-north-korea
17 days ago
0
1
1
Russian state-backed hackers set up multiple fake login pages mimicing UKR.NET, a popular Ukrainian webmail and news service, to harvest credentials and gather intelligence
therecord.media/russian-blue...
loading . . .
Russian BlueDelta hackers ran phishing campaign against Ukrainian webmail users
Researchers said the campaign likely aimed to collect sensitive information from Ukrainian users in support of broader Russian intelligence objectives.
https://therecord.media/russian-bluedelta-hackers-ran-phishing-ukraine-webmail
18 days ago
0
1
0
Russia's media regulator said Roblox expressed “readiness” to take steps to remove what the agency describes as “destructive and dangerous information” from the game platform
therecord.media/roblox-in-ta...
loading . . .
Roblox in talks with Russia to restore access after platform ban sparks backlash
According to Russia’s media regulator Roskomnadzor, the U.S.-based company acknowledged shortcomings in moderating in-game content and securing user chats, and reached out to the agency to discuss pot...
https://therecord.media/roblox-in-talks-with-russia-to-restore-access-ban
18 days ago
0
0
0
As privacy advocates and lawmakers probe how AI chatbots may spur self-harm and mental health problems, tech companies are rolling out ways to use it for things like targeted advertisements
therecord.media/privacy-advo...
loading . . .
Privacy advocates see risk in new Meta policy that uses AI chats to serve targeted ads
The new feature, which was announced October 1 and rolled out Tuesday, will “start personalizing content and ad recommendations on our platforms based on people’s interactions with our generative AI f...
https://therecord.media/privacy-advocates-see-risks-meta-ai-ad-targeting
18 days ago
0
1
0
A Ukraine-based scam network moved call centers closer to the front line in an apparent attempt to deter law enforcement operations amid Ukraine’s war with Russia
therecord.media/european-pol...
loading . . .
European police bust Ukraine-based call center network behind $11 million in scams
The group recruited employees from the Czech Republic, Latvia, Lithuania and other European countries, bringing them to Ukraine to work in the call centers.
https://therecord.media/european-police-bust-ukraine-based-call-centers
18 days ago
0
1
0
A hacking campaign that Amazon tied to Russia's military intelligence agency targeted at least 10 organizations and focused primarily on the Western energy sector
therecord.media/russia-gru-h...
loading . . .
Russia’s GRU hackers targeting misconfigured network edge devices in attacks on energy sector, Amazon says
In a press briefing this week, Amazon officials said the years-long campaign “represents a significant evolution in critical infrastructure targeting."
https://therecord.media/russia-gru-hackers-target-energy-sector-sandworm
19 days ago
0
2
3
Venezuela's state-run oil company was hit with a cyberattack a week after the U.S. military seized an oil tanker carrying nearly two million barrels of Venezuelan crude
therecord.media/venezuela-st...
loading . . .
Venezuela state oil company blames cyberattack on US after tanker seizure
PDVSA published a statement on Monday that confirmed the attack but claimed the company has still been able to operate.
https://therecord.media/venezuela-state-oil-company-blames-cyberattack-on-us
19 days ago
0
1
2
The president has taken steps to nominate Army Lt. Gen. Joshua Rudd, deputy chief of U.S. Indo-Pacific Command, to lead U.S. Cyber Command and the National Security Agency
therecord.media/joshua-rudd-...
loading . . .
Senior official at Indo-Pacific Command is Trump’s pick to lead Cyber Command, NSA
The president has taken steps to nominate Army Lt. Gen. Joshua Rudd, deputy chief of U.S. Indo-Pacific Command, to lead U.S. Cyber Command and the National Security Agency.
https://therecord.media/joshua-rudd-nomination-cyber-command-nsa
20 days ago
0
0
0
A cybersecurity incident that shut down a Washington state library system in April ended up impacting more than 340,000 people, according to new breach notification disclosures
therecord.media/over-340000-...
loading . . .
More than 340,000 impacted by cyberattack on library in large Washington county
The Pierce County Library System published breach notifications this week on its website and with regulators in several states, detailing an incident first discovered in April.
https://therecord.media/over-340000-impacted-washington-state-library-hack
23 days ago
0
1
0
Hackers reportedly breached a Russian company that allegedly is involved in building the country's unified military registration database
therecord.media/hackers-repo...
loading . . .
Hackers reportedly breach developer involved with Russia’s military draft database
A hacking group it had maintained access to the firm's systems for several months and had destroyed parts of the company’s infrastructure.
https://therecord.media/hackers-reportedly-breach-developer-involved-in-russian-military-database
24 days ago
0
0
1
Joe Francescon, announced in August as the NSA's new deputy director, will not be filling the role, sources told Recorded Future News, and the Trump administration has another pick in mind
therecord.media/announced-ns...
loading . . .
Announced pick for No. 2 at NSA won’t get the job as another candidate surfaces
Joe Francescon, announced in August as the NSA's new deputy director, will not be filling the role, sources told Recorded Future News, and the Trump administration has another pick in mind.
https://therecord.media/announced-nsa-deputy-director-pick-joe-francescon-not-taking-job
24 days ago
0
1
1
Password manager LastPass was issued a $1.6 million fine from the U.K.'s privacy regulator over cyber incidents the company experienced in 2022
therecord.media/uk-fines-las...
loading . . .
UK fines LastPass £1.2 million for data breach affecting 1.6 million people
The Information Commissioner’s Office said LastPass had “failed to implement sufficiently robust technical and security measures” to protect its data.
https://therecord.media/uk-fines-lastpass-over-1-million-data-breach
24 days ago
0
0
1
Senator Ed Markey warned that new facial recognition technology in doorbell cameras is "a giant step toward a dystopian future where Americans cannot leave their homes without being tracked and surveilled"
therecord.media/lawmaker-cal...
loading . . .
Lawmaker calls facial recognition on doorbell cameras a ‘privacy nightmare’
Sen. Ed Markey (D-MA) asked Ring in October about its privacy policies and how it intends to protect individuals recorded by its new facial recognition technology feature called Familiar Faces.
http://therecord.media/lawmaker-calls-facial-recognition-doorbell-cameras-privacy-nightmare
25 days ago
0
2
1
U.S. government agencies warned that Moscow-linked hackers were managing to cause disruptions at various critical infrastructure organizations despite haphazard and sometimes amateurish techniques
therecord.media/doj-cisa-war...
loading . . .
DOJ, CISA warn of Russia-linked attacks targeting meat processing plants, nuclear regulatory entities and other critical infrastructure
The Cybersecurity and Infrastructure Security Agency (CISA), alongside several other U.S. and international agencies, released an advisory covering the cyberattacks launched by CyberArmyofRussia_Rebor...
https://therecord.media/doj-cisa-warn-russia-hackers-targeting-critical-infrastructure
25 days ago
1
2
2
A 33-year-old Ukrainian hacker was extradited to the U.S. for her involvement in Russian groups that targeted critical infrastructure in the U.S. and elsewhere
therecord.media/us-extradite...
loading . . .
US extradites member of Russian hacktivist group involved in critical infrastructure attacks
The Justice Department unveiled two indictments on Tuesday evening charging Victoria Eduardovna Dubranova for her role in CyberArmyofRussia_Reborn (CARR) and NoName057(16), two groups known for attack...
https://therecord.media/us-extradites-member-of-russian-hacking-groups-critical-infrastructure
25 days ago
0
2
1
A cyberattack that forced Aeroflot to ground dozens of flights in July was linked by researchers to an incident at a little-known software developer
therecord.media/russia-flags...
loading . . .
Russia’s flagship airline hacked through little-known tech vendor, according to new report
The breach, which was claimed by the pro-Ukrainian hacker collective Silent Crow and the allied Belarusian Cyber-Partisans, paralyzed Aeroflot’s operations, grounding more than a hundred flights.
https://therecord.media/russia-flagship-airline-hacked-through-little-known-vendor
25 days ago
0
3
1
A new indictment details how a group managed to steal bitcoin that's now worth $368 million by convincing a victim to download a remote desktop program to their computer and then stole account information
therecord.media/california-m...
loading . . .
California man pleads guilty to RICO charges as DOJ indicts crypto theft gang
Evan Tangeman became the ninth person to plead guilty as part of a wider Justice Department takedown of a criminal group known as the Social Engineering Enterprise.
https://therecord.media/california-man-pleads-guilty-rico-charges-crypto-theft
26 days ago
0
1
2
President Donald Trump warned AI "will be destroyed in its infancy" if it is regulated at the state level
therecord.media/trump-plans-...
loading . . .
Trump plans executive order curbing state AI laws
Legislators at both the state and federal level have increasingly scrutinized how AI models suck up data for training purposes.
https://therecord.media/trump-plans-ai-exec-order-curbing-state-laws
27 days ago
0
1
1
The Treasury Department said takedowns of ransomware groups such as ALPHV and LockBit led to noticeable decreases in incidents in 2024, according to data collected through the Bank Secrecy Act
therecord.media/fincen-treas...
loading . . .
More than $2 billion in payments from 4,000 ransomware incidents reported to Treasury in recent years
The Treasury Department’s Financial Crimes Enforcement Network (FinCEN) released a study last week covering 4,194 ransomware incidents that were reported through the Bank Secrecy Act over the three-ye...
https://therecord.media/fincen-treasury-2-billion-ransomware-payments-report
27 days ago
0
3
2
Some Russian officials are publicly criticizing the Kremlin's ban of Roblox, saying they've received backlash from millions of young gamers
therecord.media/russia-bans-...
loading . . .
Russian kids revolt as Kremlin bans Roblox, other popular apps
The ban on Roblox has drawn a sharp backlash from the platform’s roughly 18 million monthly Russian users — mostly children and teenagers — who have launched social-media campaigns and video petitions...
https://therecord.media/russia-bans-roblox-drawing-criticism-from-kids
27 days ago
0
2
3
Researchers are tracking dozens of organizations that may be impacted by the React2Shell vulnerability that came into focus last week
therecord.media/researchers-...
loading . . .
Researchers track dozens of organizations affected by React2Shell compromises tied to China’s MSS
Researchers have confirmed more than 30 affected organizations tied to the React2Shell bug that emerged last week.
https://therecord.media/researchers-track-dozens-react2shell-vuln
27 days ago
0
2
2
Investigators are probing how three separate hacking groups tied to China were able to exploit a SharePoint vulnerability at the same time
therecord.media/three-hackin...
loading . . .
Three hacking groups, two vulnerabilities and all eyes on China
What does it mean that three separate China-linked groups all moved on the same SharePoint vulnerabilities at nearly the same time?
https://therecord.media/three-hacking-groups-two-vulnerabilities-china-microsoft
27 days ago
0
7
6
China-linked hackers are exploiting a newly-patched vulnerability in an open-source tool used by thousands of websites, according to a new report
therecord.media/chinese-hack...
loading . . .
Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers say
The bug, tagged as CVE-2025-55182 and referred to colloquially as React2Shell, was reported to Meta by researcher Lachlan Davidson on November 29 and publicly disclosed on Wednesday, when a fix was ro...
https://therecord.media/chinese-hackers-exploiting-react2shell-vulnerability-amazon
about 1 month ago
0
5
2
China-linked hackers are using BRICKSTORM malware to target government organizations and the technology sector, according to a new warning from U.S. and Canadian cyber agencies
therecord.media/cisa-nsa-war...
loading . . .
CISA, NSA warn of China’s BRICKSTORM malware after incident response efforts
The Cybersecurity and Infrastructure Security Agency (CISA), NSA and Canadian Centre for Cyber Security published an advisory on Thursday outlining the BRICKSTORM malware based off an analysis of eigh...
https://therecord.media/cisa-nsa-warn-brickstorm-china
about 1 month ago
0
2
1
The British Home Office initiated a public survey seeking citizen input on how facial recognition technology should be regulated as it seeks to expand its use
therecord.media/british-offi...
loading . . .
British officials seek to expand facial recognition technology use
Police have used facial recognition in Britain since 2017 and controversy has mounted as more aggressive deployments have been undertaken, including live facial recognition which involves processing r...
https://therecord.media/british-officials-seek-to-expand-facial-recognition-tech-use
about 1 month ago
0
0
0
NATO this week held its largest-ever cyberdefense exercise, drilling about 1,300 participants on the types of threats that have disrupted governments and critical infrastructure worldwide
therecord.media/nato-holds-l...
loading . . .
Amid rising threats, NATO holds its largest-ever cyberdefense exercise
About 1,300 participants from around the world dealt with the complicated and multi-faceted threats that have been seen in recent global conflicts.
https://therecord.media/nato-holds-largest-ever-cyberdefense-exercise-estonia
about 1 month ago
0
2
2
Edmonton police are the first to trial equipping officers with body cameras that use facial recognition technology
therecord.media/canadian-pol...
loading . . .
Canadian police department becomes first to trial body cameras equipped with facial recognition technology
The cameras, made by the police technology juggernaut Axon Enterprise, were deployed on a trial basis by as many as 50 officers on Wednesday, according to local news reports.
https://therecord.media/canadian-police-department-trials-facial-recognition-body-cameras
about 1 month ago
0
0
2
Customers of the Japanese office and household goods retailer Askul had been forced to place orders through fax, and the company said deliveries may be slower than usual due to ransomware recovery efforts
therecord.media/askul-resume...
loading . . .
Japan’s Askul resumes limited online sales 6 weeks after ransomware attack
Askul said Wednesday that corporate customers can now purchase a limited range of products on its platform and the company plans to gradually add more items as it restores its systems.
https://therecord.media/askul-resumes-limited-ordering-following-ransomware-attack
about 1 month ago
0
1
1
Scammers tied to an armed group in Myanmar spoofed a forex and commodities trading platform to siphon money from victims
therecord.media/doj-takes-do...
loading . . .
DOJ takes down Myanmar scam center website spoofing TickMill trading platform
The FBI said several victims used the domain and told agents that they were shown lucrative returns on what they thought were legitimate investments.
https://therecord.media/doj-takes-down-myanmar-scam-site-trickmill-spoof
about 1 month ago
0
0
0
A ruling from the EU's top court means that online marketplaces must screen and verify all ads before publication, particularly when they contain personal data
therecord.media/eu-top-court...
loading . . .
EU’s top court rules that online marketplaces are responsible for processing of data in ads
The ruling stems from a 2018 case in Romania involving an online marketplace which published a fake ad featuring personal information belonging to a woman the ad placer said was a prostitute.
https://therecord.media/eu-top-court-rules-online-marketplaces-responsible-for-data-processing-ads
about 1 month ago
0
1
1
A new backdoor called MuddyViper allowed Iran-linked attackers to exfiltrate login credentials and browser data, as well as execute files and shell commands at organizations in Israel and Egypt
therecord.media/iran-linked-...
loading . . .
Iran-linked hackers target Israeli, Egyptian critical infrastructure through phishing campaign
Active between September 2024 and March 2025, the operation primarily targeted organizations in Israel’s technology, engineering, local government, educational and manufacturing sectors.
https://therecord.media/iran-linked-hackers-target-israel-egypt-phishing
about 1 month ago
0
1
1
Companies and privacy advocates have pushed back against a recent Indian mandate for smartphone makers to install a government "cyber safety" app on devices
therecord.media/india-faces-...
loading . . .
India faces backlash over government cyber safety app mandate
Telecom Minister Jyotiraditya Scindia said Tuesday the system was optional and denied the app could be used for monitoring
https://therecord.media/india-faces-backlash-cyber-safety-app-mandate
about 1 month ago
0
1
0
South Korean officials said North Korea's Lazarus hacking group was likely involved in a recent cyberattack on South Korea's largest cryptocurrency exchange
therecord.media/officials-ac...
loading . . .
Officials accuse North Korea’s Lazarus of $30 million theft from crypto exchange
Yonhap News Agency reported on Friday that South Korean government officials are involved in the investigation surrounding $30 million worth of cryptocurrency that was stolen from Upbit on Wednesday e...
https://therecord.media/officials-accuse-north-korea-hackers-of-attack-on-crypto-exchange
about 1 month ago
0
1
1
Asahi says a ransomware attack it experienced in late September may have exposed data including names and addresses of about 1.5 million customers
therecord.media/asahi-says-r...
loading . . .
Japanese beer giant Asahi says ransomware attack may have exposed data of 1.5 million people
The company said the compromised information includes names, gender, addresses and phone numbers, but not credit-card details.
https://therecord.media/asahi-says-ransomware-incident-exposed-data
about 1 month ago
0
3
2
Polish police arrested a Russian citizen it accused of breaching security systems to gain access to company databases, potentially aimed at disrupting operations
therecord.media/poland-detai...
loading . . .
Poland detains Russian citizen suspected of hacking local firms
The suspect, whose identity has not been disclosed, illegally crossed into Poland in 2022 and obtained refugee status the following year.
https://therecord.media/poland-detains-russian-citizen-accused-of-hacks
about 1 month ago
0
4
0
House lawmakers introduced several new bills designed to protect kids online after a previous proposal stalled due to concerns over freedom of speech
therecord.media/house-commtt...
loading . . .
House Energy and Commerce Committee unveils new draft children’s online safety bill
Instead of a duty of care, the KOSA draft includes language saying that platforms must establish and maintain “reasonable policies, practices, and procedures” that address harms to minors, including t...
https://therecord.media/house-commttee-unveils-new-kosa-bill
about 1 month ago
0
2
0
A Russian state-owned postal operator in occupied portions of Ukraine said its corporate network, web platform and email systems were impacted by a cyber incident
therecord.media/hackers-knoc...
loading . . .
Hackers knock out systems at Moscow-run postal operator in occupied Ukraine
Donbas Post, which operates in the Russian-controlled parts of Donetsk and Luhansk, said the incident affected its corporate network, web platform and email systems. The company had restricted access ...
https://therecord.media/hackers-knock-out-systems-russia-operated-post-ukraine
about 1 month ago
0
2
0
Salesforce told customers that it discovered "unusual activity" related to a third-party application, and warned that it may have enabled unauthorized access to certain data
therecord.media/salesforce-c...
loading . . .
Salesforce cuts off access to third-party app after discovering ‘unusual activity’
Salesforce posted a message on its website saying an investigation revealed that the activity “may have enabled unauthorized access to certain customers’ Salesforce data through the app’s connection.”
https://therecord.media/salesforce-cuts-off-access-to-third-party-unusual-activity
about 2 months ago
0
2
2
The independent watchdog agency known as PCLOB found in a report issued Thursday that the FBI does not buy real-time location data for use in counterterrorism investigations
therecord.media/pclob-finds-...
loading . . .
Privacy oversight board finds FBI does not buy real-time location data
The report, which is based on an investigation begun by the Privacy and Civil Liberties Oversight Board (PCLOB) in 2017, provides an overview of what open-source information the FBI consults in such i...
https://therecord.media/pclob-finds-fbi-does-not-use-real-time-location-data
about 2 months ago
0
4
3
Researchers say a new strain of Android malware can allow hackers to view everything that appears on an infected device's screen — including private messages and other sensitive data
therecord.media/new-android-...
loading . . .
New Android malware can capture private messages, researchers warn
The malware can monitor everything displayed on a phone in real time — including contacts, full message threads and the content of encrypted chats — by accessing data after it has been decrypted by le...
https://therecord.media/new-android-malware-captures-private-messages
about 2 months ago
0
3
1
Spyware developer NSO Group asked a judge to overturn a recent decision involving the targeting of WhatsApp users, saying it would cause the firm "irreparable" damage
therecord.media/nso-seeks-to...
loading . . .
NSO seeks to overturn WhatsApp case, saying it is ‘catastrophic’ for the spyware maker
In a court filing ahead of the ruling, NSO told the judge that blocking it from targeting WhatsApp infrastructure to implant its spyware could “put NSO’s entire enterprise at risk” and “force NSO out ...
https://therecord.media/nso-seeks-to-overturn-whatsapp-case
about 2 months ago
0
3
2
Load more
feeds!
log in
