Lightnews — Scholar-powered news

The Record @therecordmedia.bsky.social · 5h

California's governor signed a bill that requires browsers to set up an easy-to-find mechanism that lets Californians opt-out of third-party information sharing with the push of a button therecord.media/california-s...

California enacts law giving consumers ability to universally opt out of data sharing

The California Consumer Privacy Act, signed in 2018, gave Californians the right to send opt-out signals, but major browsers have not had to make opt-outs simple to use.

therecord.media

2 3

The Record @therecordmedia.bsky.social · 9h

Although the threat actor breached "a small number" of attorney email accounts, the law firm believes it is part of a nation-state campaign that involves other companies in the legal sector therecord.media/us-law-firm-...

Major US law firm says hackers broke into attorneys’ emails accounts

While the firm did not specify which nation-state it believes the hacker is affiliated with, The New York Times reported that sources have said it is China.

therecord.media

1 1

The Record @therecordmedia.bsky.social · 9h

Incident responders said a China-based threat actor used an operation and monitoring tool during compromises of more than 100 victim machines in Taiwan, Japan, South Korea and Hong Kong therecord.media/china-linked...

China-linked hackers target Asian organizations with Nezha monitoring tool

Incident responders at cybersecurity firm Huntress said they initially came across the campaign while investigating a vulnerable, public-facing web application that was the source of an intrusion at t...

therecord.media

1

The Record @therecordmedia.bsky.social · 12h

Russian government hackers have abandoned some of their tactics and have increasingly experimented with AI-generated malware, according to Ukraine’s computer emergency response team therecord.media/russian-hack...

Russian hackers turn to AI as old tactics fail, Ukrainian CERT says

Russian hackers are now using AI not only to write phishing messages but also to generate malicious code itself.

therecord.media

2 2

The Record @therecordmedia.bsky.social · 12h

European Commission President Ursula Von der Leyen urged the EU to “urgently equip itself with a strategic capacity to respond” to Russian hybrid warfare therecord.media/russia-hybri...

Russia is at ‘hybrid war’ with Europe, warns EU chief, calling for members ‘to take it very seriously’

European Commission President Ursula Von der Leyen urged the EU to “urgently equip itself with a strategic capacity to respond” to Russian hybrid warfare.

therecord.media

1

The Record @therecordmedia.bsky.social · 12h

As Asahi said it had restarted production of Super Dry beer in Japan, the Qilin ransomware gang posted screenshots of documents it said were from the company's internal networks therecord.media/qilin-ransom...

Cybercrime crew claims attack on Japanese brewer as it restarts operations

As Asahi said it had restarted production of Super Dry beer in Japan, the Qilin ransomware gang posted screenshots of documents it said were from the company's internal networks.

therecord.media

The Record @therecordmedia.bsky.social · 12h

London's Metropolitan Police announced the arrests of two 17-year-old boys who are under questioning in relation to the hack and extortion of the Kido nursery school chain therecord.media/kido-nursery...

Teenagers arrested in England over cyberattack on nursery chain Kido

London's Metropolitan Police announced the arrests of two 17-year-old boys who are under questioning in relation to the hack and extortion of the Kido chain.

therecord.media

The Record @therecordmedia.bsky.social · 1d

Russia put restrictions on foreign SIM cards entering the country, imposing a 24-hour mobile internet blackout due to concerns they could be used to carry out drone attacks therecord.media/russia-block...

Russia blocks mobile internet for foreign SIM cards, citing drone threats

The new rule imposes a mandatory 24-hour mobile internet blackout for anyone entering Russia with a foreign SIM card.

therecord.media

3 3

The Record @therecordmedia.bsky.social · 2d

A top FBI official said organizations should treat it as a "stop-what-you're-doing and patch immediately" vulnerability therecord.media/fbi-uk-urge-...

FBI, UK Gov’t urge orgs to patch Oracle E-Business vuln after alleged Clop campaign

FBI Assistant Director Brett Leatherman said “this is ‘stop-what-you’re-doing and patch immediately’ vulnerability.”

therecord.media

2 2

The Record @therecordmedia.bsky.social · 2d

Signal said it would rather leave the European market than comply with a potential "Chat Control" rule that would require companies to build surveillance into their messaging services therecord.media/signal-calls...

Signal calls on Germany to vote against ‘Chat Control,’ saying it would leave EU market

The head of the Signal Foundation raised concerns around Germany now refusing to say whether it will support Chat Control in an upcoming vote.

therecord.media

2 3

The Record @therecordmedia.bsky.social · 5d

Salesforce said it is working with customers who appeared on a Scattered Spider leak site on Thursday. The cybercriminal group is offering to rescind its extortion demands if Salesforce itself paid a ransom therecord.media/salesforce-s...

Salesforce providing support to customers listed on Scattered Spider extortion site

The Scattered Spider cybercriminal group published a new leak site on Thursday evening with dozens of large companies listed, claiming to have stolen data from the organizations through Salesforce. Th...

therecord.media

The Record @therecordmedia.bsky.social · 5d

LinkedIn sued a software company that allegedly used millions of fake accounts to scrape data from the social media giant's customers and sell it to third parties without permission therecord.media/linkedin-sue...

LinkedIn sues software company allegedly scraping data from millions of profiles

ProAPIs, a software company, and its CEO Rahmat Alam allegedly run an operation which LinkedIn says charges customers up to $15,000 per month for scraped user data taken from the social media platform...

therecord.media

2 4

The Record @therecordmedia.bsky.social · 6d

Meta says it will appeal a ruling by a Dutch court, which ordered the company to change the way its recommendation feeds work or face steep fines therecord.media/dutch-court-...

Dutch court rules Meta violated European law by pushing users to profiled feeds

The decision comes in response to a lawsuit filed by the Dutch nonprofit Bits of Freedom, which argued that by controlling users’ feeds Meta has been improperly skewing what news consumers receive.

therecord.media

1

The Record @therecordmedia.bsky.social · 7d

A scam campaign targeting seniors has spread to Singapore, Malaysia, Canada, South Africa and the U.K. after the malware at its center was leaked online, making it freely available to hackers therecord.media/seniors-targ...

Seniors targeted in global Facebook scam spreading new Android malware

The scam originated in Australia in August but has since been seen in several countries around the globe.

therecord.media

The Record @therecordmedia.bsky.social · 8d

North Korea's IT worker scheme is expanding outside of the U.S. tech sector, likely due to increasing awareness of the scam, according to a new report therecord.media/north-korea-...

North Korea IT worker scheme expanding to more industries, countries outside of US tech sector

Okta said their new research into the scheme revealed that North Korea has honed its skills on U.S.-based companies and has expanded into dozens of different countries and industries.

therecord.media

3 2

The Record @therecordmedia.bsky.social · 8d

CISA gave federal agencies until October 20 to patch a critical file transfer vulnerability — researchers say hackers may be exploiting it therecord.media/cisa-orders-...

CISA orders federal gov to patch critical Fortra file transfer bug

The vulnerability carries a severity score of 10 out of 10 and has caused alarm among cybersecurity experts who have criticized Fortra for not saying whether it has seen the bug being exploited.

therecord.media

1 1

The Record @therecordmedia.bsky.social · 8d

California's privacy authority fined Tractor Supply Co $1.4 million over various state law violations — the largest penalty it has issued to date therecord.media/ccpa-tractor...

CPPA fines Tractor Supply Company $1.4 million for privacy violations

Tractor Supply Company allegedly failed to publish a privacy policy, notify job applicants of their privacy rights and shared personal data with third parties without permission.

therecord.media

The Record @therecordmedia.bsky.social · 8d

Congress is unlikely to move this week to renew two key cybersecurity efforts that were expected to hitch a ride on legislation to keep the government running therecord.media/cisa-2015-st...

Cyber information-sharing law and state grants set to go dark as Congress stalls over funding

Congress is unlikely to move this week to renew two key cybersecurity efforts that were expected to hitch a ride on legislation to keep the government running.

therecord.media

2 1

The Record @therecordmedia.bsky.social · 8d

Kabul's airport was "nearly deserted" and banking systems, food delivery services and online education were disrupted as Afghan authorities imposed an internet blackout therecord.media/afghanistan-...

Afghanistan plunged into nationwide internet blackout, disrupting air travel, medical care

The shutdown, confirmed by internet monitoring groups NetBlocks, Kentik and Proton VPN, began late Monday and continued into Tuesday, affecting both mobile and fixed-line services. Telephone networks ...

therecord.media

1 1 1

The Record @therecordmedia.bsky.social · 8d

A Chinese national accused of running a fraudulent investment scheme pleaded guilty on Monday after U.K. police seized nearly $7 billion worth of Bitcoin during a raid of her home in north London therecord.media/chinese-scam...

Chinese scammer pleads guilty after UK seizes nearly $7 billion in bitcoin

A Chinese national accused of running a fraudulent investment scheme pleaded guilty after U.K. police seized nearly $7 billion worth of bitcoin during a raid of her home in north London.

therecord.media

1

The Record @therecordmedia.bsky.social · 8d

Busy law enforcement agencies are trying out AI platforms that process large amounts of evidence to help officers build cases. Experts say there are potential dangers for everyone involved therecord.media/law-enforcem...

Law enforcement is using AI to synthesize evidence. Is the justice system ready for it?

Busy law enforcement agencies are trying out AI platforms that process large amounts of evidence to help officers build cases. Experts say there are potential dangers for everyone involved.

therecord.media

1

The Record @therecordmedia.bsky.social · 9d

Jaguar Land Rover is responsible for repaying a £1.5 billion bank loan, but the lender has received a guarantee that the British government would step in if there was a failure to pay therecord.media/jaguar-land-...

UK government to be guarantor for Jaguar Land Rover loan as it recovers from cyberattack

JLR itself is responsible for repaying the £1.5 billion ($2 billion) five-year loan from an unnamed commercial bank, but the lender has received a guarantee that the British government would step in i...

therecord.media

1

The Record @therecordmedia.bsky.social · 12d

A ransomware attack targeting an Ohio county in May impacted 45,000 people and included data like Social Security numbers and fingerprint data therecord.media/ohio-ransomw...

Ransomware attack on Ohio county impacts over 45,000 residents, employees

The hackers stole documents that had names, Social Security numbers, driver’s license numbers, financial account information, fingerprint data, medical information, passport numbers and more.

therecord.media

1

The Record @therecordmedia.bsky.social · 13d

Google will set up a $48 million fund for Flo app users who had their data shared with the company, while Flo will pay $8 million to resolve the class-action lawsuit therecord.media/google-flo-h...

Google, period-tracking app to pay combined $56 million to settle privacy claims

According to court documents filed this week by the plaintiffs, Google will set up a $48 million fund for Flo app users who entered information about menstruation or pregnancy from November 2016 until...

therecord.media

2 1

The Record @therecordmedia.bsky.social · 14d

Three senators introduced a bill that would task the FTC with investigating how neural data can be best safeguarded, as companies like Neuralink aim to gather and use the data to predict human behavior therecord.media/senators-int...

Senators introduce bill directing FTC to establish standards for protecting consumers’ neural data

Sens. Chuck Schumer (D-NY), Maria Cantwell (D-WA) and Ed Markey (D-MA) intend for the bill to guard against commercial entities collecting, selling or mixing together individuals’ brain signals in way...

therecord.media

3 4