The Record

“We've admired the problem for too long, and now it's time to do something about it,” National Cyber Director Sean Cairncross said about the cybersecurity threat environment.

On Monday, independent researchers revealed that the app’s application programming interface (API) reportedly contained a flaw that allowed outsiders to retrieve photos and personal details from other users’ accounts without authorization.

OT security company Nozomi Networks will operate as a wholly owned subsidiary of Mitsubishi Electric, with its headquarters still in San Francisco, the companies said in announcing the acquisition.

Sources tell Recorded Future News that top Trump administration officials have accepted that splitting up the leadership of U.S. Cyber Command and the National Security Agency would prove too lengthy and arduous amid other national security priorities.

The hacker spent months performing reconnaissance activities on both Salesloft application environments as well as those for Drift, an AI chatbot company that Salesloft acquired last year.

The disruption is the latest to hit a high-profile brand in the United Kingdom, and follows repeated delays in the British government introducing cybersecurity regulations that would require businesses to better protect themselves from attacks.

Secretary of State Marco Rubio said U.S. officials sanctioned nine people and companies involved in running Shwe Kokko — a hub for scam centers in Myanmar — as well as four individuals and six entities for their roles operating forced labor compounds in Cambodia.

Indian cybersecurity researchers claimed Kazakhstan's state-owned oil company had been hacked by a Russian-speaking operation. It was all just a pentest, though, the company said.

The "Gen Z protest" against Nepal's restrictions on 26 major social media platforms turned deadly as police clashed with demonstrators.

Roblox says it will build a system to ensure that adults and children aren't communicating unless they know one another outside the gaming platform.

Australian airline Qantas reduced bonuses for its corporate leaders in response to a breach that exposed the data of 5.7 million people earlier this year.

After the notices from Sitecore and Mandiant on Wednesday, the Cybersecurity and Infrastructure Security Agency (CISA) added the vulnerability to its exploited bugs catalog, giving all federal civilian agencies three weeks to patch it.

A malware campaign dubbed GhostRedirector by researchers at ESET attempts to compromise websites to drive traffic to gambling sites.

Luxury automaker Jaguar Land Rover says employees should stay home through the weekend as it works to mitigate the impact of a cyberattack.

In breach notifications submitted to regulators in Maine and Vermont, Chess.com explained that 4,541 people had personal information exposed to hackers who breached an unnamed file transfer application between June 5 and June 18.

More than 880,000 Texans were affected by the breach at education tech provider PowerSchool, state Attorney General Ken Paxton noted in filing a lawsuit against the company.

A federal jury awarded plaintiffs suing Google $425 million in damages, holding that by collecting the data of users who had switched off an app activity-tracking feature, the tech giant invaded the privacy of millions.

A former information security professor with more than 25 years in the Ukrainian armed forces, Oleksandr Potii is blunt about Moscow’s capabilities: “We see that Russia’s technical level is high and its potential is strong. We cannot underestimate them."

Google has been penalized €325 million ($379 million) and clothing retailer Shein has been ordered to pay €150 million ($175 million) for not getting proper consent from users for advertising cookies, France's CNIL said.

Cloud storage and remote operation can expose critical sectors to Chinese espionage, warned the Czech Republic's NÚKIB, "making trust in the reliability of the provider absolutely crucial."