The Record

Cyberespionage remains the country’s most significant digital threat, with attackers targeting government systems, research institutions and companies developing advanced technologies, according to a new intel report.

The Cybersecurity and Infrastructure Security Agency (CISA) gave all federal civilian agencies until Thursday to patch CVE-2025-26399 — a critical vulnerability impacting the popular SolarWinds Web Help Desk.

The plan is the latest effort to curb what has become the most common crime in the United Kingdom, with official surveys estimating that fraud accounts for about 40% of recorded crime.

In a notice on Monday, the agency said people and businesses with active applications for the permits are being targeted with phishing emails that often include detailed, accurate information “including property addresses, case numbers, and the true names of city and county officials.”

The Senate voted 68-28 to limit debate on Army Lt. Gen. Joshua Rudd, who has been selected for the dual-hat role.

The White House unveiled its National Cyber Strategy, pledging more offensive cyber actions against criminal networks and adversarial governments.

An executive order calls for the creation of a Victim Restoration Program in 90 days that will provide “restoration or remission to victims of cyber-enabled fraud schemes from funds clawed back, forfeited, or seized from the transnational criminal organizations that perpetrate such schemes.”

Russian state hackers are carrying out a global campaign to compromise Signal and WhatsApp accounts belonging to government officials and military personnel, Dutch intelligence warned Monday.

The internet shutdown in Iran entered its sixth day on Friday, with human rights groups calling on the country's leaders to restore digital access.

Committee Democrats criticized the KIDS Act for including a weak knowledge standard that they said allows tech companies to escape accountability for online safety harms by claiming they are unaware kids are using their platforms and deserve protections.

Passaic County, home to nearly 600,000 people in Northern New Jersey, published a statement on Wednesday evening warning residents that it is aware of a “malware attack” affecting county IT systems and phone lines.

A criminal network in Spain exploited dozens of Ukrainian women displaced by Russia’s war to carry out a multimillion-dollar fraud gambling scheme, Europol said Thursday.

Ptitsyn and several others began using the Phobos ransomware in November 2020, attacking more than 1,000 organizations around the world. He was arrested in South Korea and extradited in November 2024.

Google Threat Intelligence Group said it tracked 90 zero-day vulnerabilities that were exploited by a variety of actors last year, surpassing the 78 that were used by threat actors in 2024.

The FTC's Bureau of Consumer Protection chief discussed the agency’s embrace of age verification and how industry should think about data privacy enforcement under his watch.

International law enforcement agencies have dismantled a major phishing-as-a-service platform used to target hundreds of thousands of accounts worldwide, including those tied to hospitals and schools, Europol said Wednesday.

The Taipei District Prosecutors Office initiated its investigation in October after Chen Zhi, the founder of the Prince Group, was indicted by U.S. prosecutors on money laundering charges.

The FBI and European law enforcement agencies carried out a global crackdown on a cybercrime forum where criminals bought and sold stolen credentials and exploits of software vulnerabilities.

Researchers have identified a suspected Russian espionage campaign targeting Ukraine that uses two previously undocumented malware strains.

The CPPA alleges that PlayOn Sports collected students' personal data and delivered targeted advertising by using tracking technologies without providing a “sufficient way to opt out.”