The Record

The retailer's domain now features a brief message to customers explaining that it has “identified and are taking steps to address a security incident.”

Google Threat Intelligence spotted the China-based operation known as APT41 leveraging the company's own Calendar app as part of a cyber-espionage campaign.

Researchers at cybersecurity firm DomainTools spotted a fake Bitdefender site spreading VenomRAT malware. The antivirus company said it is working to have the site taken down.

Britain's strategic defense review calls for a new Cyber and Electromagnetic Command to “lead defensive cyber operations and coordinate offensive cyber capabilities" with the military's National Cyber Force.

Decentralized finance platform Cork Protocol paused trading and launched an investigation after millions of dollars' worth of Ethereum were lost in a "security incident."

A second state passing such tough data privacy legislation, particularly around geolocation data, could be a significant factor in pushing other states to do the same, experts said.

The company said data held in GitHub pertaining to LexisNexis Risk Solutions had been acquired by an unknown third party.

Estonia said a man is suspected of unlawfully accessing a customer card database managed by Allium UPI, the parent company of the Apotheka pharmacy chain, in February 2024.

The suspects allegedly parked cars with activated dash cams near military targets and left them to record for up to 12 hours.

Hackers likely based in Vietnam advertised websites offering AI-powered video generation tools, according to Google's Mandiant unit, and then used the sites to spread infostealers and other malware.

Sina Gholinejad admitted to using the Robbinhood ransomware variant to extort ransom payments from dozens of victims.

A Russian court sentenced a former hospital programmer to 14 years in a high-security penal colony for allegedly leaking personal data of Russian soldiers to Ukraine, authorities said.

The city filed breach notification letters with regulators seven months after a ransomware gang accessed systems.

According to police in Guangzhou, the group — allegedly linked to Taiwan’s ruling Democratic Progressive Party (DPP) — has targeted more than 1,000 key networks in over 10 Chinese provinces.

The threats ranged from deceptive apps designed to steal personal information to fraudulent payment schemes.

Massachusetts-based MathWorks provided an update to customers on Monday after initially reporting outages on May 18, confirming that it experienced a ransomware attack that took down online applications and internal systems used by staff.

The government, which previously criticized the app for so-called "subversive" activity on the platform, alleged Telegram had not cooperated with authorities in addressing criminal activity.

Europol said 300 servers and 650 domains were taken down worldwide, while about $3.5 million was seized during raids throughout the week as part of Operation Endgame.

CISA weighed in on a cyberthreat to Commvault customers that the data management giant had reported in multiple blog posts earlier this year.

U.S. and EU law enforcement seized more than $200 million and 144 kilograms of fentanyl or fentanyl-laced narcotics alongside 180 firearms as part of the international effort.