The Record

A phishing campaign is gaining access to universities' third-party platforms and routing employee paychecks to accounts controlled by hackers, researchers said.

Companies that are still sharing threat information with the government despite the lapse of the law known as CISA 2015 should be protected retroactively when Congress revives that authority, Sen. Gary Peters says.

The social media platform Discord said about 70,000 users had their government IDs stolen by cybercriminals, as the company sought to dispel claims by the purported hackers of a larger breach.

The California Consumer Privacy Act, signed in 2018, gave Californians the right to send opt-out signals, but major browsers have not had to make opt-outs simple to use.

While the firm did not specify which nation-state it believes the hacker is affiliated with, The New York Times reported that sources have said it is China.

Incident responders at cybersecurity firm Huntress said they initially came across the campaign while investigating a vulnerable, public-facing web application that was the source of an intrusion at the beginning of August.

“Random chat monitoring must be taboo in a constitutional state,” Federal Justice Minister Stefanie Hubig said as German officials signaled they will not vote for a controversial EU proposal known as Chat Control.

Russian hackers are now using AI not only to write phishing messages but also to generate malicious code itself.

As Asahi said it had restarted production of Super Dry beer in Japan, the Qilin ransomware gang posted screenshots of documents it said were from the company's internal networks.

London's Metropolitan Police announced the arrests of two 17-year-old boys who are under questioning in relation to the hack and extortion of the Kido chain.

Adam King, the sheriff for Texas’ Johnson County, and Flock Safety, the maker of the license plate reading cameras, previously said the woman was monitored because her family was worried about her safety after she self-administered an abortion.

The new rule imposes a mandatory 24-hour mobile internet blackout for anyone entering Russia with a foreign SIM card.

The data stolen mostly includes names, Discord usernames, emails, IP addresses and messages that were exchanged with customer service agents.

After halting global production last month, Jaguar Land Rover says it will restart operations and provide financial support to some of its suppliers.

Cybercriminals are using the Medusa ransomware strain during exploitation of a vulnerability in Fortra's GoAnywhere file transfer tool.

FBI Assistant Director Brett Leatherman said “this is ‘stop-what-you’re-doing and patch immediately’ vulnerability.”

Brazilian WhatsApp users should be aware of malware that hijacks contact lists to spread itself and potentially serve as a gateway for other malicious code that targets financial information, researchers said.

The head of the Signal Foundation raised concerns around Germany now refusing to say whether it will support Chat Control in an upcoming vote.

Hackers believed to be linked to China have targeted a Serbian government department overseeing aviation, as well as other European institutions, according to new research.

An advisory from Unity — which makes the software behind dozens of popular games — warns developers to patch a vulnerability that could allow an attacker to execute code via an affected app.