The Record

An advisory from Unity — which makes the software behind dozens of popular games — warns developers to patch a vulnerability that could allow an attacker to execute code via an affected app.

The Scattered Spider cybercriminal group published a new leak site on Thursday evening with dozens of large companies listed, claiming to have stolen data from the organizations through Salesforce. The group attached a lengthy extortion note threatening Salesforce and offering to rescind the extortion demands if Salesforce itself paid a ransom.

Police in El Cajon, California, searched their Flock Safety database of license plate activity on behalf of multiple out-of-state entities — in violation of California law — according to Attorney General Rob Bonta.

Incident responders at Mandiant and Google Threat Intelligence Group (GTIG) released a warning about the incident on Wednesday evening, telling Recorded Future News in an email that they are tracking a campaign launched by a threat actor potentially linked to Clop.

A new gunshot detection system from Flock Safety also can track human voices. Civil liberties advocates are urging cities not to use it.

ProAPIs, a software company, and its CEO Rahmat Alam allegedly run an operation which LinkedIn says charges customers up to $15,000 per month for scraped user data taken from the social media platform.

Incident responders at Google are warning about an extortion campaign — possibly connected to the Clop gang — that targets executives with data that cybercriminals claim was stolen via an Oracle tool.

The decision comes in response to a lawsuit filed by the Dutch nonprofit Bits of Freedom, which argued that by controlling users’ feeds Meta has been improperly skewing what news consumers receive.

A letter to European Commission officials demanded answers about why European Union funding has reportedly gone towards subsidizing the spyware industry.

Japanese beverage giant Asahi is struggling to restore operations following a cyberattack that has disrupted its business for most of the week, raising fears of shortages of the country’s top-selling beer.

The Georgia Institute of Technology is paying $875,000 to settle a False Claims Act lawsuit with the federal government, which accused an office at the school of not following cybersecurity rules on some defense contracts.

Car dealership software developer Motility said it suffered from a ransomware attack where the hackers encrypted servers that support the company’s business operations.

Canadian airline WestJet disclosed to regulators that a data breach earlier this year exposed the information of about 1.2 million people.

Espionage hackers aligned with China are targeting foreign ministries, embassies and telcos across Africa, the Middle East and Asia, researchers have found.

The scam originated in Australia in August but has since been seen in several countries around the globe.

Okta said their new research into the scheme revealed that North Korea has honed its skills on U.S.-based companies and has expanded into dozens of different countries and industries.

The vulnerability carries a severity score of 10 out of 10 and has caused alarm among cybersecurity experts who have criticized Fortra for not saying whether it has seen the bug being exploited.

Tractor Supply Company allegedly failed to publish a privacy policy, notify job applicants of their privacy rights and shared personal data with third parties without permission.

Congress is unlikely to move this week to renew two key cybersecurity efforts that were expected to hitch a ride on legislation to keep the government running.

A civil complaint filed by the federal government alleges that the Sendit app illegally collected data from users under 13 and tricked people into paying for subscriptions.