The Record
@therecordmedia.bsky.social
Covering the world of cyber and intelligence from every angle.
A Russian state-owned postal operator in occupied portions of Ukraine said its corporate network, web platform and email systems were impacted by a cyber incident therecord.media/hackers-knoc...
Hackers knock out systems at Moscow-run postal operator in occupied Ukraine
Donbas Post, which operates in the Russian-controlled parts of Donetsk and Luhansk, said the incident affected its corporate network, web platform and email systems. The company had restricted access ...
therecord.media
November 24, 2025 at 2:48 PM
A Russian state-owned postal operator in occupied portions of Ukraine said its corporate network, web platform and email systems were impacted by a cyber incident therecord.media/hackers-knoc...
Salesforce told customers that it discovered "unusual activity" related to a third-party application, and warned that it may have enabled unauthorized access to certain data therecord.media/salesforce-c...
Salesforce cuts off access to third-party app after discovering ‘unusual activity’
Salesforce posted a message on its website saying an investigation revealed that the activity “may have enabled unauthorized access to certain customers’ Salesforce data through the app’s connection.”
therecord.media
November 20, 2025 at 11:12 PM
Salesforce told customers that it discovered "unusual activity" related to a third-party application, and warned that it may have enabled unauthorized access to certain data therecord.media/salesforce-c...
The independent watchdog agency known as PCLOB found in a report issued Thursday that the FBI does not buy real-time location data for use in counterterrorism investigations therecord.media/pclob-finds-...
Privacy oversight board finds FBI does not buy real-time location data
The report, which is based on an investigation begun by the Privacy and Civil Liberties Oversight Board (PCLOB) in 2017, provides an overview of what open-source information the FBI consults in such i...
therecord.media
November 20, 2025 at 10:21 PM
The independent watchdog agency known as PCLOB found in a report issued Thursday that the FBI does not buy real-time location data for use in counterterrorism investigations therecord.media/pclob-finds-...
Researchers say a new strain of Android malware can allow hackers to view everything that appears on an infected device's screen — including private messages and other sensitive data therecord.media/new-android-...
New Android malware can capture private messages, researchers warn
The malware can monitor everything displayed on a phone in real time — including contacts, full message threads and the content of encrypted chats — by accessing data after it has been decrypted by le...
therecord.media
November 20, 2025 at 5:44 PM
Researchers say a new strain of Android malware can allow hackers to view everything that appears on an infected device's screen — including private messages and other sensitive data therecord.media/new-android-...
Spyware developer NSO Group asked a judge to overturn a recent decision involving the targeting of WhatsApp users, saying it would cause the firm "irreparable" damage therecord.media/nso-seeks-to...
NSO seeks to overturn WhatsApp case, saying it is ‘catastrophic’ for the spyware maker
In a court filing ahead of the ruling, NSO told the judge that blocking it from targeting WhatsApp infrastructure to implant its spyware could “put NSO’s entire enterprise at risk” and “force NSO out ...
therecord.media
November 20, 2025 at 4:06 PM
Spyware developer NSO Group asked a judge to overturn a recent decision involving the targeting of WhatsApp users, saying it would cause the firm "irreparable" damage therecord.media/nso-seeks-to...
The move potentially criminalizes Russians who buy and support products from the game developer, which has a large following within the country therecord.media/russia-black...
Russia blacklists S.T.A.L.K.E.R. game developer, accusing it of aiding Ukraine’s war effort
The Prosecutor General’s Office accused the game’s developer, GSC Game World, of financing Ukraine’s armed forces — alleging it transferred about $17 million to the military in 2022.
therecord.media
November 20, 2025 at 3:40 PM
The move potentially criminalizes Russians who buy and support products from the game developer, which has a large following within the country therecord.media/russia-black...
Co-founders of a crypto mixing site that handled more than $237 million in illegal transactions were each sentenced to several years in prison and ordered to forfeit more than $6.3 million in the fees they earned therecord.media/samourai-wal...
Samourai Wallet crypto mixer’s co-founders sentenced to prison
The pair had pleaded guilty in late July to participating in a conspiracy “to operate a money transmitting business in which they knowingly transmitted criminal proceeds.”
therecord.media
November 20, 2025 at 3:12 PM
Co-founders of a crypto mixing site that handled more than $237 million in illegal transactions were each sentenced to several years in prison and ordered to forfeit more than $6.3 million in the fees they earned therecord.media/samourai-wal...
An international crackdown used cryptocurrency to buy access to pirated materials in order to gain a window into the financial infrastructure of dozens of piracy sites therecord.media/internationa...
International operation traces $55 million crypto trail of digital piracy sites
Thirty investigators from 15 countries took part in the five-day crackdown earlier this month targeting 69 digital piracy sites, including 25 illegal streaming services whose information was referred ...
therecord.media
November 19, 2025 at 7:53 PM
An international crackdown used cryptocurrency to buy access to pirated materials in order to gain a window into the financial infrastructure of dozens of piracy sites therecord.media/internationa...
The information and privacy commissioners for Ontario and Alberta said schools should have taken additional steps to protect student data that was breached in a hack on education software firm PowerSchool therecord.media/canadian-pri...
Canadian privacy regulators say schools share blame for PowerSchool hack
The Ontario and Alberta information and privacy commissioners’ reports fault the school systems for several missteps, including not putting privacy and security related provisions in their contracts w...
therecord.media
November 19, 2025 at 5:44 PM
The information and privacy commissioners for Ontario and Alberta said schools should have taken additional steps to protect student data that was breached in a hack on education software firm PowerSchool therecord.media/canadian-pri...
European privacy advocates say a new proposal aimed at simplifying GDPR and AI regulations would weaken several key EU privacy protections therecord.media/european-com...
European Commission ‘simplification’ proposal would weaken GDPR, AI regulations
Under the proposal, the EU would weaken data protection rules by delaying when regulations governing high-risk AI systems take effect and allowing companies to use personal data for AI training withou...
therecord.media
November 19, 2025 at 4:57 PM
European privacy advocates say a new proposal aimed at simplifying GDPR and AI regulations would weaken several key EU privacy protections therecord.media/european-com...
The White House cyber czar said his office is "pressing to get things moving as quickly as we can" on a coordinated cyber strategy that will likely contain six pillars therecord.media/national-cyb...
National cyber strategy will include focus on ‘shaping adversary behavior,’ White House official says
The upcoming strategy would contain six “pillars” — with one focused on “shaping adversary behavior” and another on public-private partnerships, Sean Cairncross said.
therecord.media
November 18, 2025 at 5:13 PM
The White House cyber czar said his office is "pressing to get things moving as quickly as we can" on a coordinated cyber strategy that will likely contain six pillars therecord.media/national-cyb...
MI5 warned British lawmakers that Chinese spies were using fake accounts on LinkedIn in an attempt to gain intelligence and build relationships with politicians therecord.media/mi5-warns-ch...
MI5 warns of Chinese spies using LinkedIn to gain intel on lawmakers
The alert identifies two specific LinkedIn profiles, featuring fake personas, that are being used by China’s Ministry of State Security in an attempt to build relationships in Westminster and gain int...
therecord.media
November 18, 2025 at 3:22 PM
MI5 warned British lawmakers that Chinese spies were using fake accounts on LinkedIn in an attempt to gain intelligence and build relationships with politicians therecord.media/mi5-warns-ch...
Logitech said hackers exploited a zero-day vulnerability in a third-party software platform to copy data from its internal IT system therecord.media/logitech-dis...
Logitech discloses data breach after Clop claims
The filing comes one week after the Clop cybercriminal organization claimed it stole information from Logitech through a zero-day vulnerability in Oracle’s E-Business Suite tool.
therecord.media
November 17, 2025 at 7:25 PM
Logitech said hackers exploited a zero-day vulnerability in a third-party software platform to copy data from its internal IT system therecord.media/logitech-dis...
Princeton University said a database containing donor information was breached, but it did not include data such as Social Security numbers, financial account information or student records therecord.media/princeton-do...
Princeton University says database containing donor, alumni info breached
Information including names, email addresses, telephone numbers, and home and business addresses is stored on the database, in addition to donation information.
therecord.media
November 17, 2025 at 5:36 PM
Princeton University said a database containing donor information was breached, but it did not include data such as Social Security numbers, financial account information or student records therecord.media/princeton-do...
A Russian port operator said its terminals and facilities continued to operate despite a days-long cyberattack aimed at disrupting its coal and fertilizer shipments therecord.media/cyberattack-...
Cyberattack on Russian port operator aimed to disrupt coal, fertilizer shipments
The goal, Port Alliance claimed, was to “destabilize operations and disrupt business processes” tied to exports of coal and mineral fertilizers through its seaports in the Baltic, Azov–Black Sea, Far ...
therecord.media
November 14, 2025 at 4:41 PM
A Russian port operator said its terminals and facilities continued to operate despite a days-long cyberattack aimed at disrupting its coal and fertilizer shipments therecord.media/cyberattack-...
Russian news reports and Thai sources said police had detained an alleged Russian hacker on the island of Phuket and transferred him to Bangkok for possible transfer to the U.S. therecord.media/russian-hack...
Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition
Russian news reports and Thai sources said police had detained an alleged Russian hacker on the island of Phuket and transferred him to Bangkok for possible transfer to the U.S.
therecord.media
November 14, 2025 at 4:12 PM
Russian news reports and Thai sources said police had detained an alleged Russian hacker on the island of Phuket and transferred him to Bangkok for possible transfer to the U.S. therecord.media/russian-hack...
An Italian web hosting and IT service provider serving more than 5.4 million customers was targeted by a widespread phishing campaign that used a variety of techniques to evade security tools therecord.media/phishing-cam...
Phishing campaign targets customers of major Italian web hosting provider
The operation used a sophisticated phishing kit designed to impersonate the login and payment pages of Aruba S.p.A., stealing customer credentials and credit card details.
therecord.media
November 13, 2025 at 3:12 PM
An Italian web hosting and IT service provider serving more than 5.4 million customers was targeted by a widespread phishing campaign that used a variety of techniques to evade security tools therecord.media/phishing-cam...
Cybersecurity professionals at Amazon said they discovered hackers exploiting previously undisclosed zero-day vulnerabilities that could have provided them with administrator-level access to compromised systems therecord.media/advanced-hac...
‘Advanced’ hacker seen exploiting Cisco, Citrix zero-days
The hackers notably used custom malware and were exploiting CVE-2025-5777 — now known colloquially as “Citrix Bleed Two” — before it was disclosed publicly in July.
therecord.media
November 12, 2025 at 6:19 PM
Cybersecurity professionals at Amazon said they discovered hackers exploiting previously undisclosed zero-day vulnerabilities that could have provided them with administrator-level access to compromised systems therecord.media/advanced-hac...
Google took legal action against a cybercriminal organization behind SMS scams — often claiming to come from USPS or toll agencies — that has been used to compromise millions of credit cards therecord.media/google-files...
Google files lawsuit to disrupt massive ‘Lighthouse’ smishing scheme
According to the tech giant, the accused criminals developed the “Lighthouse” phishing kit, which provides custom tools to scammers to deploy “smishing” — or SMS phishing — attacks and to build fraudu...
therecord.media
November 12, 2025 at 4:59 PM
Google took legal action against a cybercriminal organization behind SMS scams — often claiming to come from USPS or toll agencies — that has been used to compromise millions of credit cards therecord.media/google-files...
German prosecutors said a far-right extremist was operating an online platform that collected cryptocurrency donations to fund the killings of elected officials, including former chancellors therecord.media/german-extre...
German extremist arrested over operating alleged darknet assassination marketplace
The 49-year-old German-Polish national, identified only as Martin S., was detained in Dortmund earlier this week, according to the Federal Prosecutor’s Office.
therecord.media
November 12, 2025 at 3:22 PM
German prosecutors said a far-right extremist was operating an online platform that collected cryptocurrency donations to fund the killings of elected officials, including former chancellors therecord.media/german-extre...
New York Attorney General Letitia James on Wednesday issued a consumer alert, telling residents to report instances where companies use algorithmic pricing without disclosure therecord.media/enforcement-...
Enforcement begins for New York’s algorithmic pricing law
California’s legislature also has enacted an algorithmic pricing law, but it has not yet taken effect, making New York the first state in the country to regulate the practice.
therecord.media
November 10, 2025 at 8:57 PM
New York Attorney General Letitia James on Wednesday issued a consumer alert, telling residents to report instances where companies use algorithmic pricing without disclosure therecord.media/enforcement-...
Kyiv and other Ukrainian cities faced widespread internet and communication outages following one of Russia's largest missile and drone strikes on Ukraine's energy infrastructure since the start of the year therecord.media/russian-miss...
Russian missile barrage disrupts internet, customs databases in Ukraine
Emergency blackouts lasting up to 12 hours were introduced following the attack, with Kyiv and other regions facing widespread internet and communication outages, according to internet watchdog NetBlo...
therecord.media
November 10, 2025 at 3:16 PM
Kyiv and other Ukrainian cities faced widespread internet and communication outages following one of Russia's largest missile and drone strikes on Ukraine's energy infrastructure since the start of the year therecord.media/russian-miss...
The federal agency in charge of federal agency providing budget and economic information to Congress said a "foreign actor" hacked its systems and may have gained access to messages and chats between Congressional offices and staffers therecord.media/cbo-implemen...
Congressional Budget Office implementing new security controls following cyberattack
A spokesperson for the CBO confirmed the security incident and said the agency has taken immediate action to contain it while also implementing “additional monitoring and new security controls to furt...
therecord.media
November 7, 2025 at 6:11 PM
The federal agency in charge of federal agency providing budget and economic information to Congress said a "foreign actor" hacked its systems and may have gained access to messages and chats between Congressional offices and staffers therecord.media/cbo-implemen...
An education tech firm will have to bolster its access control and account management practices and do real time monitoring for suspicious activity in addition to paying a $5.1 million fine therecord.media/ed-tech-comp...
Ed tech company fined $5.1 million for poor data security practices leading to hack
The ed tech firm also allegedly failed to monitor its systems for suspicious activity and did not separately secure backup and active databases.
therecord.media
November 6, 2025 at 9:03 PM
An education tech firm will have to bolster its access control and account management practices and do real time monitoring for suspicious activity in addition to paying a $5.1 million fine therecord.media/ed-tech-comp...
A proposal with support in the EU Parliament expands data sharing between national governments and Europol and allows for more substantial processing of biometric data therecord.media/eu-parliamen...
EU Parliament committee votes to advance controversial Europol data sharing proposal
Privacy and civil liberties advocates have decried the proposed expansion for how it will allegedly facilitate mass surveillance and large scale data privacy violations.
therecord.media
November 6, 2025 at 5:39 PM
A proposal with support in the EU Parliament expands data sharing between national governments and Europol and allows for more substantial processing of biometric data therecord.media/eu-parliamen...