The Record
195 briefings written from The Record's reporting, newest first. Each is a plain-language summary written here for Australian business, with a link to the original.
- Hackers Hijack Ukraine's Air Alert App to Send Fake Nuclear and Chemical Warnings
- Second Wave of Suspected Cyberattacks Spoils Supermarket Freezer Stock Across Europe
- FBI Blames North Korean Group for $6.3 Billion Binance Theft and Asks Crypto Industry to Block Stolen Funds
- US Justice Department Flags Privacy Risk as Character.AI Chat Histories Could Be Sold in Bankruptcy
- Revolve Confirms Hackers Stole Saved Payment Card Details From Customer Accounts
- Nearly 5 Million Floridians Caught in Financial Aid Site Breach, Including Social Security Numbers
- Syrian Electronic Army Hacker Jailed for 42 Months After Targeting Nearly 50 Western Organisations
- New NetamLoader Malware Targets Custom Government Windows Systems in Asia
- Polymarket Outage Traced to Compromised Website Performance Provider
- Cyberattack Shuts Stores and Online Services at Russian Retailer Poryadok for Five Days
- Binance Loses $6.3 Billion in Record Crypto Theft Traced to a Single Compromised Laptop
- PHP2Shell Flaws Now Being Exploited, With Firewalls Reportedly Compromised
- GM Pays $220 Million to Settle Claims It Sold Drivers' Location and Behaviour Data
- US Bankruptcy Notice System Restored After Cyberattack, Contractor Says No Data Was Stolen
- US Regulator Demands Answers From Nine Major Brands on How Personal Data Drives Prices and Worker Pay
- Belgium Pulls Main Tax Portal Offline After Cyberattack Days Before Filing Deadline
- New Mexico Hospital Network Restores Systems After Ransomware Attack, Warns Public Not to Engage With Hackers
- US Appeals Court Strikes Down West Virginia Law Protecting Officials' Personal Data from Data Brokers
- Japan Airlines Customer Data Exposed After Breach at Its Reservation Provider
- Privacy Group Accuses Scale AI of Invasive Tracking of Freelance Workers in Europe
- US Sanctions Target Network Laundering Earnings of North Korean IT Workers
- Moldova Probes Possible Foreign Role in Government Data Breach Affecting 750,000 ID Numbers
- UK Government Plans to Examine Making Tech Vendors Liable for Insecure Products
- Belarus-Linked Hackers Move From Spying to Destruction, Mirroring Russia's Priorities in Ukraine
- FBI Seizes Domain of 'Bulletproof' Hosting Provider Accused of Ignoring Abuse Complaints
- US Charges Six Over Madagascar Crypto Scam Operation That Targeted Victims With Fake NFT Investments
- UK Police Data Repeatedly Exposed Through Supplier Breaches, Watchdog Warns
- Cyberattack Forces New Mexico's Largest Hospital System to Divert Ambulances and Cancel Surgeries
- Fake Fuel and Drone Alert Apps Spread Android Trojan Among Anxious Russian Drivers
- Moscow to Restrict Mobile Internet During Two Major Summits
- CISA Confirms Attacks on Two PHP Flaws as Millions of Websites Remain Exposed
- Australia's Signals Directorate Is Warning Businesses of Attacks Before They Happen, and Asking for Reports in Return
- Texas Sues OpenAI and Sam Altman Over Claims ChatGPT Is Marketed as Safer Than It Is
- Serbian Leader Concedes Election After Reports of Spyware Used Against Critics
- Starlink Disruption in Ukraine Shows the Risk of Relying on a Single Connectivity Provider
- Ukraine Warns Hackers Are Breaking Into Dahua Security Cameras Through a Cloud Remote Access Feature
- Unrevoked Key Let Attackers Poison Popular AI Tool LiteLLM
- US Regulator Blocks Two Devices Over Huawei-Linked Surveillance Chips
- UK Moves to Jail Undersea Cable Saboteurs for Up to 14 Years
- Quest Diagnostics Pulls Lab Results Platform Offline After Unauthorised Access
- PHP2Shell Attacks Surge, but Experts Say Working Exploits Remain Out of Reach for Now
- Crime Stoppers Pauses Tip Line After Vendor Breach Exposes 1.5 Million Anonymous Reports
- Operation Serengeti III: 1,462 Arrested and $105 Million Recovered in Africa-Wide Cybercrime Crackdown
- Cyberattack Disrupts City Services in Columbia, South Carolina, as Local Government Attacks Mount
- Meta Ordered to Pay $25 Billion Over Cambridge Analytica Data Privacy Violations
- Free Cyber Defences Offered to 500 Small US Utilities in $10 Million Industry Initiative
- US Lawmakers Warn of Russian Influence Campaign Targeting Democrats Ahead of Midterms
- PHP2Shell: Two Critical PHP Flaws Prompted Website Shutdowns After Fix Stalled for Months
- Two Russian Hacking Groups Joined Forces to Wipe Data at a Ukrainian Grain Company
- Critical PHP Flaws Force Hundreds of Websites Offline as Attacks Begin
- SafePay ransomware gang hits more than 600 organisations, warn US, UK and German agencies
- Contractor Breach Exposes Data of Millions of California Public School Students
- Former 23andMe Owner Pays California $6 Million Over 2023 Genetic Data Breach
- Eight-Year Prison Term for Hacker Who Used Phishing Emails to Raid Tax Firms
- Hackers Hit Hundreds of French Supermarket Fridges, and EU Law Won't Force Fixes
- Russia-Linked Hackers Target European Defence Firms and Police Using Malicious Word Attachment
- Court Refuses to Hold NSO Group in Contempt, Citing Thin Evidence from WhatsApp
- ConnectWise Pauses Cloud Backup After Stolen Credential Opens Door to Customers' Microsoft 365 Data
- Pegasus Spyware Found on Phone of Serbian University Rector Ahead of National Elections
- Ahold Delhaize Confirms Cyberattack Forced Grocery Systems Offline in the US and Europe
- Drone Strike on Russian Data Centre Highlights How Physical Attacks Can Disrupt Online Services
- Russian Hosting Provider FirstVDS Breached: Customer Passwords and Credentials Stolen Through Server Management Flaw
- Exposed Credentials on GitHub Allegedly Led to Dodo Pizza Breach and Arrests in Moscow
- Maryland County Confirms Files Stolen in August Attack Claimed by Rhysida Ransomware Gang
- Suspected Chinese state-backed group exploits new BeyondTrust remote support flaw
- Contractor Cyberattack Knocks Out US Federal Bankruptcy Notice System
- Suspected Kazakhstan-Linked Spy Group Targets Government Agencies Across Former Soviet States
- Sudden Starshield Speed Limits Show the Risk of Relying on a Single Connectivity Provider
- Law Enforcement Takes Down Hundreds of Sites Behind Crypto Scam Targeting Brooklyn's Russian Community
- Polish Investigators Say Spyware Maker Kept Full Access to Pegasus System Used on Opposition Figures
- Microsoft Disrupts Three Phishing Platforms Behind Hundreds of Millions of Scam Messages
- Russian Travel Booking Platform Goes Offline After Cyberattack, Halting New Reservations
- Ivanti VPN Zero-Day Under Active Attack: Patch Now and Follow Volexity's Guidance
- US Congressional Probe Finds Dating App Scammers Reached Users at Scale on Tinder and Hinge
- Engineer Charged Over Hidden Listening Device Found in AI Company's Executive Meeting Room
- US Raids Hit North Korean Laptop Farms Behind $3 Million Remote IT Worker Scheme
- US Regulator Alleges Firm Made $60 Million Selling Fake Help to Sextortion Victims
- Researchers Warn AI Sandbox Flaw Could Let Rogue Agents Leak Data
- Scam compounds in Ghana and Nigeria raided as more than 100 suspected trafficking victims identified
- Fake Conference Invites and Research Requests: How North Korea's Kimsuky Group Is Targeting Ukrainian Experts
- St. Petersburg Internet Provider Hit by Days of Disruption After Claimed Cyberattack
- Ledger Warns Some Crypto Wallets Sold by a Southeast Asian Reseller Contained Hidden Spy Hardware
- Cyberattack Knocks Systems Offline at Three British Fashion Brands Owned by South Africa's TFG
- Ahold Delhaize Takes Systems Offline After Cyber Incident Disrupts Supermarkets in Three Countries
- Drone Strikes on Three Yandex Data Centers Show How Cloud Dependence Can Disrupt Daily Business
- Cyberattack Hits Refrigeration at Hundreds of French Supermarkets, Spoiling Fresh Food
- Suspected Qilin Ransomware Operative Arrested on Holiday in Japan and Sent to Germany
- Money Mule Network Boss Pleads Guilty After Fake Job Ads Lured 15,000 People Into Laundering Cybercrime Cash
- Medical Device Maker iRhythm Confirms Data Breach Affecting at Least 360,000 People
- FBI Announces Another Arrest Linked to ShinyHunters After Breach of Its Jobs Site
- Hacktivist Group Admits Breaching Moscow Health Network and Staying Inside for Months
- Empire Market Co-Creator Jailed for 40 Years Over Dark Web Marketplace That Traded Stolen Data and Hacking Tools
- US Lawmakers Challenge Google's $10 Million Deal for Failed Airline's Employee Data
- International Coalition Seizes Hacking Tools Linked to Chinese Contractor Behind Flax Typhoon
- US Ransomware Recovery Boss Charged with Fraud for Secretly Paying Hackers and Billing Victims Far More
- ASOS Says Hackers Impersonated a Trusted Contact to Take Over an Employee Account and Send a Fake Breach Alert
- SIM-Swap Crypto Thief Jailed in London After Funding Gold Grills and Dubai Holidays
- Leaked Chats Reveal Extortion Gang Sending 'Agents' Into US Law Firms
- Two South Korean Megachurches Investigate Breaches Affecting Hundreds of Thousands of Members
- Cheap Android Phones Shipped With Ad-Fraud Malware Built Into Their Firmware
- MatchBoil Malware Keeps Evolving as Russian-Aligned Spies Target Ukrainian Transport and Energy Firms
- Yandex Data Centre Disrupted After Reported Drone Strike, Showing How Physical Events Can Take Cloud Services Offline
- US Offers $10 Million Reward for Accused Chinese Hacker Linked to Hafnium Campaign
- US Lawmakers Push for $11 Million in Mental Health Support for Cyber Command Staff
- Phishing Email Led to Arizona Court Breach Exposing 1.3 Million People's Data
- Oklahoma Judge Tosses Licence Plate Camera Evidence, Citing Supreme Court Digital Privacy Ruling
- US Senate Passes Healthcare Cyber Bill in the Wake of the Change Healthcare Breach
- UK Report Puts a Price on Russian Cyber Threats: At Least $2.6 Billion a Year, and No Official Count
- FortiBleed: Over 86,000 Fortinet Firewalls Compromised in Months-Long Credential Theft Campaign
- Alleged Ploutus ATM Malware Mastermind Faces US Court After Arrest
- South Korea Investigates Bank Breaches Believed to Be Driven by AI Agents
- Suspected Ransomware Attack Forces Osaka Metropolitan University to Cancel Classes
- Fake Cloudflare Checks on Hacked Websites Spread Password-Stealing Malware in Ukraine
- ASOS Shares Tumble After App Notification Claims Company Was Hacked
- Wikimedia Says OpenAI Agents Broke Its Rules, Probed a Notes Tool and May Have Strained Its Services
- ShinyHunters Under Pressure: Second Alleged Member Reportedly Detained in Jordan
- New Citrix NetScaler Flaw Lets Attackers Crash Appliances, Even Patched Ones
- Ukraine's Largest Grocery Chain ATB Hit by Extortion Attack as Hackers Claim Millions of Customer Records
- Ransomware Gang Booba Hits University Medical School and Small Local Governments
- Hackers Sat Quietly Inside a Russian Healthcare Network for Nearly Two Years
- Nikkei Email Account Hijacked to Send 9,000 Phishing Messages to Staff and Journalistic Sources
- Danish Population Register Breach Shows How Supplier Access Can Expose Millions
- US Court Dismisses Pegasus Spyware Case Brought by Salvadoran Journalists
- Bipartisan Push Grows to Rein In AI-Powered License Plate Cameras
- Ransomware Attack Forces Mississippi City to Shut Down Systems
- Warlock Ransomware Hits Critical Infrastructure via Unpatched SharePoint Servers
- Alleged Iranian Hacker Behind Global University Breaches Extradited to US
- OpenAI Agents Caught Secretly Scraping Data From Government and Health Websites
- Chinese State-Linked Hackers Target AI Experts and Asian Governments in New Phishing and Backdoor Campaigns
- Teen Ringleader of KillSec Ransomware Group Arrested in International Police Operation
- Breach at Polish Invoicing Platform Fakturownia Exposes Customer and Partner Data
- US Sanctions 10 Over ATM 'Jackpotting' Malware Scheme Linked to Venezuelan Gang
- Connected Cars Are Quietly Sharing Driver Data With Advertisers, Study Finds
- Pentagon Orders Cyber Command to Overhaul Staff Wellbeing After Suicide Cluster
- AI Is Supercharging How Fast Hackers Exploit Software Bugs, Google Warns
- Russian Hackers Deploy iPhone Exploit Kit and Malicious Android Apps in Espionage Campaign
- Russian FSB-Linked Hackers Ramp Up Phishing Campaigns Targeting Ukraine Supporters
- Two US Air Force Members Jailed for Multi-Million Dollar Email Fraud Scheme
- Spyware Maker Paragon Heads to Nasdaq, Raising Transparency and Risk Questions
- OpenAI Apologises After Its AI Agents Breached Australian Government Websites
- Dodo Pizza Breach Exposes Customer Data After Hacker Group Claims Massive Theft
- Arizona Court System Breach Exposes Residents' Personal Data
- ShinyHunters Bypass Workarounds in Renewed Oracle PeopleSoft Attacks
- New Mexico Jury Finds Meta Deceived Users on Data Privacy, Nearly 44 Million Times
- Urgent Warning: Citrix NetScaler Zero-Days Being Actively Exploited
- SQL Injection Attack on Polish Medical Software Provider Exposes Patient Data
- Former US Soldier Sentenced to Nearly Six Years for Telecom Hacking and Extortion
- Kiteworks Tells Customers to Shut Down Systems Amid Zero-Day Threat Warning
- Labcorp to Pay $2.3 Million and Overhaul Security After Massive Data Breach
- Welsh Police Force Hit by Cyberattack, Staff Data Possibly Exposed
- Was It Really a Hack? Doubts Emerge Over Claims of AI Breach on Medicare Portal
- New Bill Pushes Voluntary Cyber Rules for Telecoms After Salt Typhoon Breach
- Rydox Marketplace Operator Pleads Guilty in Global Cybercrime Crackdown
- Russian Drone Strikes Knock Out Internet for Thousands in Kyiv
- Healthcare Tech Giant Astrana Breached After Staff Impersonation Scam
- UK Regulator Investigates Pornhub Owner Over Age Verification Failures
- US Spy Agencies Find No Successful Foreign Hack of 2024 Election, But Influence Campaigns Persist
- FBI Investigates Alleged Breach of Its Own Jobs Website by ShinyHunters
- Latvian Police Arrest Suspect Behind Extortion Hack on Electronics Repair Firm
- UK to Launch National Centre to Counter State-Backed Disinformation
- Canadian Privacy Regulator Investigates ID Verification Firm After Massive Driver's Licence Breach
- Microsoft and UK Police Dismantle AI-Powered 'EvilTokens' Cybercrime Platform
- UK Cybersecurity Chief Warns AI Will Help Hackers Faster Than It Helps Defenders
- When the Internet Goes Dark: Lessons in Emergency Communication Resilience
- Hacker Claims Breach of Belgian Table Tennis and Gymnastics Federations
- Munich University Breach Exposes Student Financial and Health Data
- Cybercrime Rivals Turn on Each Other: ShinyHunters Hijacks Cl0p's Extortion Site
- LinkedIn Secures Court Order to Stop Mass Data Scraping
- Russia Claims Thousands of Cyberattacks Hit Its Election Systems, but Evidence Is Thin
- Countries Crack Down on North Korean IT Worker Fraud Network
- China-Linked Hacking Group NightEagle Expands Attacks to Russian Businesses
- North Korean 'WaterPlum' Hackers Steal $10.5M by Posing as Recruiters
- EU Moves Toward Law Banning Under-13s From Social Media
- Hacking Group Claims Breach of Russian Election Systems Ahead of Parliamentary Vote
- Congress Moves to Address Wellbeing Crisis at US Cyber Command
- Israeli 'Influence-for-Hire' Firm Trained Angolan Officials in Fake News Campaigns
- US Federal AI Safety Legislation Stalls, Likely Delayed to 2027
- US Coast Guard and FBI Investigate Cyberattacks on Tankers Bound for America
- US House Passes Bill to Boost Local Police Tools Against Financial Scams
- Cyberattack Knocks Out International Meteor Organization's Website
- Three Ukrainians Charged Over Mass Theft of 610,000 Roblox Accounts
- Police Use of Surveillance Cameras on Their Own Officers Sparks Backlash
- EU Proposes Emergency Protocol for Coordinated Response to Cyberattacks and Sabotage
- Ukraine Toughens Laws Against Scam Call Centres Amid Corruption Scandal
- Norway Investigates Telenor Over Data Handover to Myanmar Military Regime
- Iranian State Hackers Use Fake Medical Scans and Trusted Apps to Spy on Perceived Regime Critics
- Ukraine Names New Cybersecurity Coordination Chief Amid Leadership Reshuffle
- CenterPoint Energy Confirms Data Breach After Dark Web Post Surfaces
- China's Top Spy Chief Flags US AI Models as Cyber Risk
- NY Prosecutors Shut Down 12 AI Deepfake Porn Sites
- Five Alleged Black Axe Cybercriminals Extradited Over Global Romance Scams
- Pro-Ukraine Hacktivist Group Escalates to Destructive Malware Attacks
- Fake Government Websites Used to Scam Users in Central Asia
- Revolut Tricked Into Leaking Customer Data via Fake Government Email Request
- NSA to Overhaul Structure Into Five 'Mission Centers' Focused on Cyber, AI and China