From The Record · 40 stories
UK Criminal Records Office Breached for Two Years Due to Unpatched Systems and Unread Alerts
The UK's ACRO Criminal Records Office received a reprimand from the Information Commissioner’s Office (ICO) after three intrusions over nearly two years exposed personal data, including that of domestic violence victims. The breaches occurred due to unpatched systems and ignored security alerts, highlighting significant security failures within the organization.
NSA Appoints Kerianne Tobitsch as New General Counsel
The National Security Agency (NSA) has appointed Kerianne Tobitsch, formerly a senior lawyer at the Department of Homeland Security (DHS), as its new general counsel. This appointment fills a key legal role that had been vacant for approximately a year and is critical for overseeing clandestine operations and advising on legal matters like FISA Section 702.
Cyberattacks Disrupt Government Services in California, Oklahoma, and South Dakota
Local governments in Suisun City, California, Coweta, Oklahoma, and Mitchell, South Dakota, experienced cyberattacks that disrupted public services, including 911 systems and city operations. These incidents highlight the ongoing vulnerability of municipal infrastructure to cyber threats and the immediate impact on citizen services.
New Zealand Sanctions Russian Hackers and Propaganda Groups Over Ukraine War Involvement
New Zealand imposed sanctions on 33 Russian individuals and entities, including hackers and propaganda groups, for their roles in supporting Russia's war against Ukraine. These sanctions target those involved in cyberattacks, disinformation campaigns, and alleged abductions of Ukrainian children. The action aligns New Zealand with other Western governments that have previously sanctioned some of these individuals for malicious cyber activities.
National Rural Water Association Partners with DEF CON Franklin to Launch Water Watch Center
The National Rural Water Association (NRWA) has partnered with DEF CON Franklin to create the Water Watch Center (WWC), a program providing threat intelligence and cybersecurity services to small water utilities. This initiative addresses recent cyberattacks on water systems in multiple states and aims to support the 91% of U.S. community water systems that serve fewer than 10,000 people.
Senate Confirms Adam Cassady as US Cyber Ambassador
The US Senate confirmed Adam Cassady as the next U.S. ambassador for cyber and digital policy, filling a position that has been vacant since the previous administration. This appointment is significant as Cassady will lead the Bureau of Cyberspace and Digital Policy, which recently underwent a reorganization and staff reduction.
Military Device Manufacturer IEH Corporation Discloses Cyber Incident to SEC
IEH Corporation, a manufacturer of specialized military components, disclosed a cyber incident to the SEC after an employee fell victim to a phishing attack. Intruders gained access to an email inbox containing sensitive information, including export-controlled technical data, though there is no evidence data was exfiltrated. This incident highlights ongoing cybersecurity risks for defense contractors and the potential exposure of critical military supply chain information.
House Committee Report: Chinese Telcos Maintain US Presence Despite Security Concerns
A bipartisan House Select Committee on China investigation found that China Mobile, China Unicom, and China Telecom retain significant presence in the U.S. internet ecosystem, despite previous FCC license revocations due to cybersecurity risks. The committee concluded these companies are not independent from the Chinese government and urged Congress to strengthen the FCC's authority to remove their technology from U.S. infrastructure. This matters because it highlights ongoing national security concerns regarding foreign influence in critical telecommunications networks.
De Bijenkorf warns customer data may be exposed after cyber incident at logistics partner
Dutch retailer De Bijenkorf reported a cyber incident affecting one of its logistics providers, potentially exposing customer data and causing delays in orders, returns, and refunds. The incident highlights the ongoing risk to retailers from attacks targeting third-party contractors.
Żabka convenience store chain hacked via third-party account, internal systems exposed
Polish convenience store chain Żabka experienced a cyberattack that exposed internal company systems after attackers compromised a third-party contractor's account. The breach did not affect payment systems, transaction data, the Żappka loyalty app, or day-to-day store operations, according to the company and Polish authorities. This incident highlights the supply chain risk posed by third-party vendor access to internal systems.
U.S. Cyber Command to open Silicon Valley office to foster tech sector relationships
U.S. Cyber Command plans to establish an outpost in Silicon Valley, named Cyber Command-West (CC-W), to build relationships with the tech sector and accelerate the development of cyber capabilities. This initiative is part of the "CYBERCOM 2.0" modernization effort, aiming to bridge the gap between technology demonstration and government acquisition for timely deployment in digital operations.
Angola's Largest Telco, Unitel, Hit by Cyberattack Hours Before Stock Market Debut
Angola's largest telecommunications operator, Unitel, experienced a cyberattack that disrupted voice, mobile data, and internet services for millions nationwide, occurring hours before its landmark stock exchange debut. The incident suggests an attack on core internal systems, impacting business communications and digital services, though the IPO proceeded as planned.
Jay Clayton Approved by Senate Panel Despite Election Security Concerns
Jay Clayton, Trump’s nominee for director of national intelligence, has been approved by the Senate Intelligence Committee in a 9-8 vote along party lines. Concerns about Clayton's ambiguous stance on the legitimacy of the 2020 election results were raised during his confirmation hearing. Democrats expressed fears of potential politicization of intelligence roles under his direction. The nomination will proceed to a full Senate vote before the upcoming recess.
Bank of Baroda Confirms Cyber Incident After Data Theft Claims
India's Bank of Baroda confirmed a cybersecurity incident involving a compromised employee email account, which led to unauthorized access to certain data. This confirmation follows claims by a threat actor of having stolen and published sensitive banking data, though the bank stated its core banking systems were unaffected. The incident highlights ongoing cybersecurity challenges for financial institutions in Asia.
Senator Wyden Urges Federal Agencies to Replace Outdated VPNs with Zero-Trust Architecture
Senator Ron Wyden has called on federal agencies to remove insecure, public internet-facing VPNs and adopt zero-trust architectures within two years. This push comes amid concerns that foreign adversaries are exploiting vulnerabilities in legacy VPNs to access government networks and steal sensitive data.
UK Supreme Court Rejects Bahrain's Immunity Claim in Spyware Lawsuit
The UK Supreme Court ruled that Bahrain cannot claim state immunity to block a lawsuit filed by two dissidents who allege the government infected their devices with FinSpy spyware. This decision allows the lawsuit, seeking damages for mental harm from alleged hacking that occurred in the UK, to proceed.
AnMed Health System Closes Facilities in SC/GA After Malware Attack
AnMed, a non-profit health system operating in South Carolina and Georgia, closed numerous departments and facilities due to a cybersecurity disruption involving malware. This incident highlights the ongoing vulnerability of healthcare systems to cyberattacks, which frequently result in significant financial costs and operational disruptions.
Telegram Phishing Campaign Targets Belarusian Activist, Russian, and Kazakhstani Users
A highly personalized Telegram phishing campaign has been uncovered, targeting an exiled Belarusian activist and users in Russia and Kazakhstan. The attackers used fake security alerts and custom phishing links to trick victims into revealing one-time login codes, aiming to hijack their Telegram accounts.
UK Prime Minister Reappoints Cybersecurity Minister Despite Department Abolition
UK Prime Minister Andy Burnham reappointed Liz Lloyd as cybersecurity minister, maintaining policy continuity despite abolishing the department that previously housed the role. This decision ensures the progression of the Cyber Security and Resilience Bill through Parliament, which updates cyber regulations and expands their scope to more organizations.
CertiK Reports 33% Increase in 'Wrench' Attacks Against Crypto Holders in H1 2026
CertiK reported a 33% year-over-year increase in "wrench" attacks, physical coercion incidents targeting cryptocurrency holders, during the first half of 2026. These attacks, which involve violence or intimidation to force asset transfers, highlight a growing trend of real-world threats impacting digital asset security.
State Department Imposes Visa Restrictions on Foreign Cyber Scammers and Their Families
The U.S. State Department announced new visa restrictions targeting individuals involved in foreign cybercrime networks, including cyberscams and sextortion, and their immediate family members. This policy aims to combat industrial-scale scam centers, particularly in Southeast Asia, which are estimated to cost Americans billions annually.
House Passes Defense Bill Extending CISA 2015 Info-Sharing Protections for a Decade
The House passed its version of the annual defense policy bill, which includes a provision to extend the 2015 Cybersecurity and Information Sharing Act (CISA) for another decade. This extension is significant because CISA 2015 provides legal protections for the private sector and federal government to share data on cyber threats, and its brief expiration last year hindered federal officials' visibility into digital threats.
Taiwan to throttle mobile data during national resilience drills
Taiwan will throttle mobile internet speeds to 1% of normal capacity during national resilience exercises in August, affecting 14 cities. The drill aims to test communication capabilities during potential disruptions from disasters or military conflict, emphasizing preparedness for residents.
Kenya investigates hack of president's website demanding bitcoin ransom
Kenya is investigating a cyberattack that defaced President William Ruto's official website with a ransom demand of five bitcoins. The attackers claimed this was their third warning to the president, though no sensitive data has been compromised according to government officials.
Flock Safety abandons controversial acoustic distress detection system
Flock Safety has decided to discontinue its acoustic gunshot detection device aimed at identifying human distress due to privacy concerns. The decision follows backlash from privacy advocates and consultations with communities, emphasizing the system was never intended for general release.
India asserts leaked nuclear plant files are not a safety risk
India's nuclear operator confirmed that leaked documents related to the Kudankulam Nuclear Power Plant do not impact safety or security. The files, attributed to the World Leaks group, mainly pertain to non-nuclear infrastructure, according to official statements.
Zelensky appoints Yevhenii Khmara as Ukraine's acting defense minister
Ukrainian President Volodymyr Zelensky appointed Yevhenii Khmara, previously acting head of the SBU, as the acting defense minister. This decision follows public protests regarding the dismissal of former Defense Minister Mykhailo Fedorov and raises legal questions due to Khmara's military background.
Senator Wyden urges U.S. officials to oppose Canadian surveillance legislation
Senator Ron Wyden has called on U.S. officials to evaluate Canadian legislation allowing surveillance of American citizens. The Lawful Access Act could compel U.S. companies to enable surveillance, jeopardizing national security and user privacy.
Ukrainians Protest Dismissal of Defense Minister Mykhailo Fedorov
Ukrainians held protests against the dismissal of Defense Minister Mykhailo Fedorov, who promoted drone and digital military integration. The protests reflect dissatisfaction among younger citizens and soldiers regarding the decision, as Fedorov was seen as vital in modernizing Ukraine's military amid ongoing conflict.
LVM continues recovery efforts after ransomware attack disrupted services
Latvia's state forestry company, LVM, is still restoring IT systems weeks after a June ransomware attack. Customer services, including mapping and hunting applications, remain affected, with two-thirds of customers lacking access.
NSA Rebrands Hacking Division as 'Tailored Access Operations'
The NSA has reinstated the name 'Tailored Access Operations' for its hacking division, reversing a prior reorganization decision. This change aims to enhance its responses to evolving cyber threats from nations like China and Russia.
Former UK privacy chief plans legal action against harassment accuser
John Edwards, former UK Information Commissioner, is preparing legal action against a woman who reported him for harassment. This follows multiple allegations sustained by an independent investigation, prompting a government review of the Information Commissioner's Office culture and governance.
EU launches action plan to reduce reliance on foreign AI systems
The European Commission has announced an action plan focusing on cybersecurity and AI, aimed at reducing dependence on foreign models. This plan includes creating a blueprint for structured access to advanced AI capabilities and highlights the urgency for member states to adopt existing EU laws on cybersecurity.
UK National Cyber Action Plan Delayed Amid Political Upheaval
The UK's National Cyber Action Plan launch has been postponed due to political instability following Prime Minister Keir Starmer's resignation. The Cyber Resilience Pledge, part of the plan, saw limited participation, with less than 15 FTSE 350 companies signing up despite government efforts. The delay and low participation raise concerns about the UK's commitment to cybersecurity amid leadership transitions.
Japanese teen arrested for cyberattack on anime streaming service Bandai Channel
A 15-year-old boy was arrested in Japan for exploiting a flaw in Bandai Channel's servers to fraudulently cancel over 46,000 subscriptions. The incident led to a temporary suspension of the service and underscores vulnerabilities in streaming platforms.
Japanese companies report cyber breaches affecting millions of customers
Several major Japanese companies, including Aflac Japan, have reported cyber breaches that exposed personal data of millions and disrupted operations. These incidents require further investigation and highlight ongoing cybersecurity challenges faced by the industry.
Levi Strauss & Co. Reports Corporate Data Exfiltration After Social Engineering Attack
Levi Strauss & Co. disclosed that hackers accessed and exfiltrated corporate information from three employee computers through a social engineering attack. The company stated that the incident did not disrupt business operations and found no evidence of consumer data exposure, but the specific corporate data taken was not disclosed. The company believes the incident will not materially impact its business.
Analog Devices Discloses Data Breach, Files Exfiltrated
Semiconductor company Analog Devices reported a data breach detected on June 23, where an unauthorized party accessed systems and exfiltrated certain files. The company stated that operations were not disrupted and the incident is not expected to materially impact its business, though it is also assessing public reports of a separate cybersecurity matter from July 26.
Stade Français restores systems after cyberattack, investigates data leak
French rugby club Stade Français Paris confirmed a cyberattack disrupted its information systems, but has since restored operations from backups. The club is investigating a data leak after a sample of allegedly stolen data was published online by the Qilin ransomware group. This incident highlights the increasing targeting of sports organizations by financially motivated hackers.
Trump raised cyber scam compound issue with Xi, State Department official says
A State Department official informed senators that former U.S. President Donald Trump discussed Southeast Asian cyber scam compounds with Chinese President Xi Jinping. This issue is significant due to the billions of dollars siphoned from Americans annually by these operations, often run by Chinese organized crime groups.