The Record

CISA has released two documents explaining its plans for the CVE Program — a critical cybersecurity resource used globally to catalog thousands of software and hardware bugs.

The Scattered Spider cybercriminal operation was able to extort at least $115 million in a three-year spree that also included the breach of a federal court network, U.S. authorities said in unsealing charges against one suspect.

An industry watchdog group found that the popular YouTuber MrBeast collected children’s data without obtaining consent from parents.

Slovak cybersecurity firm ESET said it had detected four cases in which both groups compromised the same Ukrainian machines.

A cache of leaked documents from the Beijing-based company called GoLaxy lays out a chilling new approach to information warfare: an army of AI personas, engineered to look like us, think like us, and win our trust.

Russia's aviation sector continues to report digital disruptions, with the latest affecting the website of one of its busiest airports.

Britain's foreign intelligence agency has a new darkweb site for foreigners to share "sensitive information on global instability, international terrorism or hostile state intelligence activity."

Cybersecurity firm Radware discovered a vulnerability they call “ShadowLeak” where an attacker could exploit the vulnerability by simply sending an email to the user.

Katherine Sutton most recently served as the chief technology adviser to the commander and director of Pentagon operations at U.S. Cyber Command.

The Digital ECA mandates that tech companies take “reasonable measures” to block young users from accessing content which features violence, porn, sexual exploitation, drugs or gambling, as well as content that encourages self harm.

Siberia-based airline KrasAvia experienced some outages to digital services in an incident that bears similarities to one that Ukraine-aligned hackers claimed in late July.

Officials in Balkh, one of Afghanistan’s most populous provinces, confirmed earlier this week that internet cables had been disconnected following a “complete ban” issued by Hibatullah Akhundzada, the Taliban’s reclusive leader.

A 19-year-old and an 18-year-old have been arrested and charged in the hack of London's transport agency in 2024 — an attack attributed to the Scattered Spider cybercrime collective.

In refusing to overturn the decision or greenlight a new trial, U.S. District Judge James Donato shot down Meta’s claim that recordings of women’s data obtained from the period tracking app Flo were "secondhand" and are therefore not covered by the California wiretapping law which Meta is accused of violating.

A hacker group known as RevengeHotels is using artificial intelligence to boost its attacks on hotels in Brazil and elsewhere, researchers found.

Shares in Autins, a company providing specialist insulation components for Jaguar vehicles, opened 55% below their Tuesday closing price on the AIM exchange for smaller companies.

The hacking group known as Kimsuky used generative AI to create South Korean military IDs used in a phishing campaign against defense-related institutions, researchers said.

Former local British elected official Oliver Steadman has been charged with blackmail in a case involving attempts to acquire compromising photographs from politicians.

Microsoft found that the group behind RaccoonO365 has been paid at least $100,000 in cryptocurrency from about 100 subscriptions. This is likely only a portion of the money earned from the tool, according to Microsoft.

Conor Fitzpatrick, aka BreachForums founder "pompompurin," will spend three years in prison after a court vacated an earlier decision to set him free on supervised release.