From The Record · 37 stories
Angola's Largest Telco, Unitel, Hit by Cyberattack Hours Before Stock Market Debut
Angola's largest telecommunications operator, Unitel, experienced a cyberattack that disrupted voice, mobile data, and internet services for millions nationwide, occurring hours before its landmark stock exchange debut. The incident suggests an attack on core internal systems, impacting business communications and digital services, though the IPO proceeded as planned.
Jay Clayton Approved by Senate Panel Despite Election Security Concerns
Jay Clayton, Trump’s nominee for director of national intelligence, has been approved by the Senate Intelligence Committee in a 9-8 vote along party lines. Concerns about Clayton's ambiguous stance on the legitimacy of the 2020 election results were raised during his confirmation hearing. Democrats expressed fears of potential politicization of intelligence roles under his direction. The nomination will proceed to a full Senate vote before the upcoming recess.
Bank of Baroda Confirms Cyber Incident After Data Theft Claims
India's Bank of Baroda confirmed a cybersecurity incident involving a compromised employee email account, which led to unauthorized access to certain data. This confirmation follows claims by a threat actor of having stolen and published sensitive banking data, though the bank stated its core banking systems were unaffected. The incident highlights ongoing cybersecurity challenges for financial institutions in Asia.
Senator Wyden Urges Federal Agencies to Replace Outdated VPNs with Zero-Trust Architecture
Senator Ron Wyden has called on federal agencies to remove insecure, public internet-facing VPNs and adopt zero-trust architectures within two years. This push comes amid concerns that foreign adversaries are exploiting vulnerabilities in legacy VPNs to access government networks and steal sensitive data.
UK Supreme Court Rejects Bahrain's Immunity Claim in Spyware Lawsuit
The UK Supreme Court ruled that Bahrain cannot claim state immunity to block a lawsuit filed by two dissidents who allege the government infected their devices with FinSpy spyware. This decision allows the lawsuit, seeking damages for mental harm from alleged hacking that occurred in the UK, to proceed.
AnMed Health System Closes Facilities in SC/GA After Malware Attack
AnMed, a non-profit health system operating in South Carolina and Georgia, closed numerous departments and facilities due to a cybersecurity disruption involving malware. This incident highlights the ongoing vulnerability of healthcare systems to cyberattacks, which frequently result in significant financial costs and operational disruptions.
Telegram Phishing Campaign Targets Belarusian Activist, Russian, and Kazakhstani Users
A highly personalized Telegram phishing campaign has been uncovered, targeting an exiled Belarusian activist and users in Russia and Kazakhstan. The attackers used fake security alerts and custom phishing links to trick victims into revealing one-time login codes, aiming to hijack their Telegram accounts.
UK Prime Minister Reappoints Cybersecurity Minister Despite Department Abolition
UK Prime Minister Andy Burnham reappointed Liz Lloyd as cybersecurity minister, maintaining policy continuity despite abolishing the department that previously housed the role. This decision ensures the progression of the Cyber Security and Resilience Bill through Parliament, which updates cyber regulations and expands their scope to more organizations.
CertiK Reports 33% Increase in 'Wrench' Attacks Against Crypto Holders in H1 2026
CertiK reported a 33% year-over-year increase in "wrench" attacks, physical coercion incidents targeting cryptocurrency holders, during the first half of 2026. These attacks, which involve violence or intimidation to force asset transfers, highlight a growing trend of real-world threats impacting digital asset security.
State Department Imposes Visa Restrictions on Foreign Cyber Scammers and Their Families
The U.S. State Department announced new visa restrictions targeting individuals involved in foreign cybercrime networks, including cyberscams and sextortion, and their immediate family members. This policy aims to combat industrial-scale scam centers, particularly in Southeast Asia, which are estimated to cost Americans billions annually.
House Passes Defense Bill Extending CISA 2015 Info-Sharing Protections for a Decade
The House passed its version of the annual defense policy bill, which includes a provision to extend the 2015 Cybersecurity and Information Sharing Act (CISA) for another decade. This extension is significant because CISA 2015 provides legal protections for the private sector and federal government to share data on cyber threats, and its brief expiration last year hindered federal officials' visibility into digital threats.
Taiwan to throttle mobile data during national resilience drills
Taiwan will throttle mobile internet speeds to 1% of normal capacity during national resilience exercises in August, affecting 14 cities. The drill aims to test communication capabilities during potential disruptions from disasters or military conflict, emphasizing preparedness for residents.
Kenya investigates hack of president's website demanding bitcoin ransom
Kenya is investigating a cyberattack that defaced President William Ruto's official website with a ransom demand of five bitcoins. The attackers claimed this was their third warning to the president, though no sensitive data has been compromised according to government officials.
Flock Safety abandons controversial acoustic distress detection system
Flock Safety has decided to discontinue its acoustic gunshot detection device aimed at identifying human distress due to privacy concerns. The decision follows backlash from privacy advocates and consultations with communities, emphasizing the system was never intended for general release.
India asserts leaked nuclear plant files are not a safety risk
India's nuclear operator confirmed that leaked documents related to the Kudankulam Nuclear Power Plant do not impact safety or security. The files, attributed to the World Leaks group, mainly pertain to non-nuclear infrastructure, according to official statements.
Zelensky appoints Yevhenii Khmara as Ukraine's acting defense minister
Ukrainian President Volodymyr Zelensky appointed Yevhenii Khmara, previously acting head of the SBU, as the acting defense minister. This decision follows public protests regarding the dismissal of former Defense Minister Mykhailo Fedorov and raises legal questions due to Khmara's military background.
Senator Wyden urges U.S. officials to oppose Canadian surveillance legislation
Senator Ron Wyden has called on U.S. officials to evaluate Canadian legislation allowing surveillance of American citizens. The Lawful Access Act could compel U.S. companies to enable surveillance, jeopardizing national security and user privacy.
Ukrainians Protest Dismissal of Defense Minister Mykhailo Fedorov
Ukrainians held protests against the dismissal of Defense Minister Mykhailo Fedorov, who promoted drone and digital military integration. The protests reflect dissatisfaction among younger citizens and soldiers regarding the decision, as Fedorov was seen as vital in modernizing Ukraine's military amid ongoing conflict.
LVM continues recovery efforts after ransomware attack disrupted services
Latvia's state forestry company, LVM, is still restoring IT systems weeks after a June ransomware attack. Customer services, including mapping and hunting applications, remain affected, with two-thirds of customers lacking access.
NSA Rebrands Hacking Division as 'Tailored Access Operations'
The NSA has reinstated the name 'Tailored Access Operations' for its hacking division, reversing a prior reorganization decision. This change aims to enhance its responses to evolving cyber threats from nations like China and Russia.
Former UK privacy chief plans legal action against harassment accuser
John Edwards, former UK Information Commissioner, is preparing legal action against a woman who reported him for harassment. This follows multiple allegations sustained by an independent investigation, prompting a government review of the Information Commissioner's Office culture and governance.
EU launches action plan to reduce reliance on foreign AI systems
The European Commission has announced an action plan focusing on cybersecurity and AI, aimed at reducing dependence on foreign models. This plan includes creating a blueprint for structured access to advanced AI capabilities and highlights the urgency for member states to adopt existing EU laws on cybersecurity.
UK National Cyber Action Plan Delayed Amid Political Upheaval
The UK's National Cyber Action Plan launch has been postponed due to political instability following Prime Minister Keir Starmer's resignation. The Cyber Resilience Pledge, part of the plan, saw limited participation, with less than 15 FTSE 350 companies signing up despite government efforts. The delay and low participation raise concerns about the UK's commitment to cybersecurity amid leadership transitions.
Japanese teen arrested for cyberattack on anime streaming service Bandai Channel
A 15-year-old boy was arrested in Japan for exploiting a flaw in Bandai Channel's servers to fraudulently cancel over 46,000 subscriptions. The incident led to a temporary suspension of the service and underscores vulnerabilities in streaming platforms.
Japanese companies report cyber breaches affecting millions of customers
Several major Japanese companies, including Aflac Japan, have reported cyber breaches that exposed personal data of millions and disrupted operations. These incidents require further investigation and highlight ongoing cybersecurity challenges faced by the industry.
Levi Strauss & Co. Reports Corporate Data Exfiltration After Social Engineering Attack
Levi Strauss & Co. disclosed that hackers accessed and exfiltrated corporate information from three employee computers through a social engineering attack. The company stated that the incident did not disrupt business operations and found no evidence of consumer data exposure, but the specific corporate data taken was not disclosed. The company believes the incident will not materially impact its business.
Analog Devices Discloses Data Breach, Files Exfiltrated
Semiconductor company Analog Devices reported a data breach detected on June 23, where an unauthorized party accessed systems and exfiltrated certain files. The company stated that operations were not disrupted and the incident is not expected to materially impact its business, though it is also assessing public reports of a separate cybersecurity matter from July 26.
Latvian Police Arrest Suspected Hacker in Electronics Repair Company Data Breach
Latvian authorities arrested a 23-year-old man suspected of hacking two companies, including electronics repair firm TSC, to steal personal data and attempt extortion. The suspect allegedly exploited website vulnerabilities and used automated tools, with investigations ongoing for potential attacks on other businesses.
Ukraine's Prosecutor General Resigns Amid Bribery Probe Involving Scam Call Centers
Ukraine's prosecutor general, Ruslan Kravchenko, resigned following allegations that officials in his office accepted bribes to protect fraudulent call centers. This development highlights ongoing efforts by Ukrainian anti-corruption agencies to address corruption within high-level government offices.
Slovenian Casinos Reopen After Cyberattack Disrupted Gaming Systems
Hit, a major Slovenian gambling and tourism group, has begun reopening its casinos after a cyberattack forced them to shut down for several days. The incident highlights the ongoing vulnerability of the gaming industry to cyber threats and the operational disruptions that can result.
Indian National Arrested for Alleged Role in $7.5 Million Elder Scam
Jay Sunilbharthi Goswami, an Indian national, was arrested in Canada while attempting to flee the U.S. after being charged with wire fraud and money laundering. He is accused of acting as a money mule for overseas scammers who defrauded elderly New Yorkers and New Jersey residents of over $7.5 million.
U.S. Bank Attributes Ransomware Claims to Fourth-Party Incident, Denies Internal Breach
U.S. Bancorp stated that recent data theft claims by the LockBit ransomware gang are linked to a breach involving a contractor for a third-party, not its own systems. The bank confirmed no evidence of compromise to its internal networks or data repositories.
Stade Français restores systems after cyberattack, investigates data leak
French rugby club Stade Français Paris confirmed a cyberattack disrupted its information systems, but has since restored operations from backups. The club is investigating a data leak after a sample of allegedly stolen data was published online by the Qilin ransomware group. This incident highlights the increasing targeting of sports organizations by financially motivated hackers.
Trump raised cyber scam compound issue with Xi, State Department official says
A State Department official informed senators that former U.S. President Donald Trump discussed Southeast Asian cyber scam compounds with Chinese President Xi Jinping. This issue is significant due to the billions of dollars siphoned from Americans annually by these operations, often run by Chinese organized crime groups.
Georgia Investigates Alleged Foreign Disinformation Campaign Targeting Russian Tourists
Georgia's State Security Service has initiated a criminal investigation into an alleged foreign disinformation campaign. This campaign reportedly used fake social media accounts to spread fabricated stories portraying Georgia as unsafe for Russian tourists, aiming to damage the country's national and economic interests.
Finland to Disconnect Fiber-Optic Link to Russia as Lease Expires
Finland's national electricity transmission operator, Fingrid, will disconnect a fiber-optic telecommunications link to Russia when its lease expires at the end of the year. This action removes remaining cross-border infrastructure after electricity trade ceased in 2022, though authorities expect the impact on internet traffic to be limited.
Former UK Defence Intelligence Head Discusses Cyber Warfare and Continuous Campaigning
General Sir Jim Hockenhull, former head of UK Defence Intelligence, stated that Britain's adversaries engage in continuous campaigning, treating all state instruments as part of a long effort, a practice Britain does not easily adopt. He emphasized that cyber capabilities cannot be stockpiled and deterrence theory needs modernization, focusing on the impact of visibility on adversaries.