The Record

The National Bank of Ukraine announced that attackers may have gained access to users’ personal data, including names, phone numbers, email addresses and delivery addresses, in a recent cyberattack.

The company said it detected unusual activity within its IT environment on Sunday and activated incident response protocols and isolated the impacted systems.

In a flash alert on Thursday, the FBI said it has tracked more than 1,900 ATM jackpotting incidents since 2020 and over 700 in 2025 that involved more than $20 million in losses.

Dragos's Rob Lee said Volt Typhoon is "still very active, and they're still absolutely mapping out and getting into embedding in U.S. infrastructure, as well as across our allies.”

West Virginia sued Apple for allegedly allowing iCloud to be used to disseminate and store child sexual abuse content.

U.K. Prime Minister Keir Starmer announced a new law that will require tech companies to remove intimate images shared without consent within two days or face large fines and potentially have their services blocked.

A spokesperson for the French government said potentially 1.2 million accounts were impacted by the incident.

Dell and Google released notices on Tuesday about CVE-2026-22769, warning that a sophisticated Chinese actor has been targeting the bug since at least mid-2024.

Attorney General Ken Paxton announced the lawsuit on Monday and said it is the first of several that will be filed this week against companies affiliated with China's government.

In a report released this week, Russian cybersecurity firm Kaspersky said it uncovered a previously undocumented backdoor dubbed Keenadu that is built directly into a device’s core software, allowing it to load into every application launched on the tablet.

The instruction to commanders to keep affected cars outside of secured perimeters comes amid growing concerns over motor vehicle network equipment and supply chains that routinely record location and other data.

The finding is the latest evidence that despite being placed on the U.S. government’s Entity List in July 2023, Predator manufacturer the Intellexa Consortium has continued to operate in the shadows.

A 47-year-old man was arrested by Polish police for his alleged involvement with the Phobos ransomware operation.

On Saturday afternoon, the ShinyHunters cybercriminal organization claimed to have stolen more than 600,000 records from the company containing personal information.

Traces of commercial surveillance technology manufactured by the Israeli spyware maker Cellebrite were found on a prominent Kenyan dissident’s phone, the latest in a series of abuses of the technology targeting civil society.

The campaign began in early January, shortly after mass nationwide demonstrations erupted across Iran calling for an end to the Islamic Republic system.

Dutch police have arrested a 40-year-old man who refused to delete confidential documents law enforcement accidentally sent to him.

Researchers said they identified a network of five Chrome extensions, marketed as tools to change themes and enhance the VK user experience, that took control of infected accounts and manipulated settings without users’ consent.

Ukraine's security service said Russia was trying to recruit locals to help restore access to blocked Starlink satellite internet terminals.

Space looks increasingly like the next arena of great power competition — crowded with satellites, vulnerable to disruption, and governed by rules written for a far simpler age.