The Record

The Treasury Department has taken three people closely affiliated with the holding company behind Predator spyware off a sanctions list, reversing their designation in 2024 by the Biden administration.

Two Americans who worked for incident response firms face up to 20 years in prison for turning ransomware upon U.S. businesses.

U.S. and Australian cyber agencies confirmed that hackers are exploiting a vulnerability impacting data storage systems from the company MongoDB.

Two banks have informed regulators in Maine that recent data breaches were sourced back to a cyberattack on Marquis Software.

France’s data protection regulator has fined the software company Nexpublica France €1.7 million ($2 million) for poor cybersecurity practices in the wake of a data breach.

South Korean online retailer Coupang is defending its response to a major data breach by an insider, releasing more details of the investigation — including a MacBook recovered from a river bottom.

France’s national postal service La Poste said on Friday that operations had been restored following a distributed denial-of-service (DDoS) attack that began earlier in the week.

Grigol Liluashvili, who ran the Republic of Georgia's state security service from 2020 until April of this year, is facing allegations that he protected scam call centers that defrauded victims around the world.

The software giant ServiceNow announced that it is acquiring the cyber firm Armis for $7.75 billion.

An organization is looking to develop a first-of-its-kind managed security service provider (MSSP) model tailored specifically for rural water utilities.

The company has begun notifying state regulators about the attack and sending breach notification letters to victims.

SEC lawyers said in a 29-page complaint that the companies ran “investment clubs” on WhatsApp that brought in users from advertisements on social media.

Crooks used fraudulent ads on major search engines to mimic banks and harvest people's login credentials, netting at least $14.6 million, the U.S. authorities said in announcing a takedown of the operation.

Spotify responded to the scraping and upload over the weekend of 86 million tracks from the platform by an open-source group.

France's La Poste confirmed that a distributed denial-of-service (DDoS) attack was the source of problems with its websites and mobile applications.

The campaign surfaced earlier in October after researchers at the New York-based cybersecurity firm Intezer identified a malicious XLL file uploaded to VirusTotal, first from Ukraine and later from Russia.

South Korea will begin requiring facial recognition when signing up for a new mobile phone number in a bid to fight scams, the Ministry of Science and ICT announced.

NSO Group had sought to stay the order pending a decision on its appeal in the case, which centers on allegations that it targeted 1,400 WhatsApp users with its powerful zero-click Pegasus spyware in 2019.

The Justice Department unsealed two indictments charging 54 people for their alleged roles in a campaign to develop and deploy a variant of the Ploutus malware, allowing them to pilfer hundreds of thousands of dollars from ATMs across the U.S.

The university said it detected the incident last week in an online code repository used by its IT teams and quickly secured the system.