↵ select ↓ ↑ navigate esc close

The Record from Recorded Future News

npub1wmeawng592w5lese25adsg52wa8czt8yk70hq3t74kx356ww0t8sp6935a@drss.io

The Record by Recorded Future News gives exclusive, behind-the-scenes access to leaders, policymakers, researchers, and the shadows of the cyber underground.

Alleged ShinyHunters member reportedly detained in Jordan, assisting law enforcement

5 Oct 2026

Saif ‌al-Din Khader is cooperating with the FBI, reports said, as the bureau responds to a massive breach that exposed employee data.

US, Australia warn of latest Citrix vulnerability after NetScaler advisory

5 Oct 2026

Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities

Ukraine grocery chain ATB confirms cyberattack as hackers threaten to leak data

5 Oct 2026

Ukraine’s largest grocery store chain, ATB, confirmed that it was hit by a cyberattack after hackers posted an extortion demand on its website.

University of Illinois Chicago affected by ransomware attack on medical school

5 Oct 2026

A ransomware attack that affected the University of Illinois Chicago (UIC) College of Medicine resulted in the theft of some information from its servers.

Belarusian hacktivists spent two years inside Russian healthcare network, researchers say

5 Oct 2026

Russian cybersecurity researchers attributed a quiet two-year espionage campaign to the Belarusian Cyber Partisans, a group better known for public attacks against governments and infrastructure.

Japanese media group Nikkei discloses cyberattack targeting journalistic sources

5 Oct 2026

The Japanese media giant Nikkei disclosed a cyber incident involving an employee email account that may have compromised journalistic sources.

Data breach at Denmark’s national population register exposes 8.8 million people

5 Oct 2026

Denmark is investigating a data breach affecting approximately 8.8 million people after unauthorized users gained access to its national population register.

Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus

2 Oct 2026

The plaintiffs, who all worked for the independent and Salvadoran news outlet El Faro, failed to convince the court that their case had jurisdiction in California, according to the judge’s order.

Bipartisan backlash to ALPRs grows as two high-profile bills are introduced

2 Oct 2026

Republican Sen. Josh Hawley has new legislation on limiting automated license plate readers (ALPRs), while Democratic Sens. Bernie Sanders and Jeff Merkley, with Rep. Alexandria Ocasio-Cortez, have

Mississippi mayor says ransomware incident led city to shut down systems

2 Oct 2026

Government services were temporarily disrupted by ransomware in Vicksburg, Mississippi. Mayor Willis Thompson said the FBI and other authorities are investigating.

'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries

2 Oct 2026

The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.

Iranian accused of hacking American universities extradited from Montenegro

1 Oct 2026

An Iranian national accused by the U.S. of taking part in dozens of breaches involving the theft of academic data and intellectual property has been extradited from Montenegro.

OpenAI software attempted to secretly scrape data from dozens of prominent websites

1 Oct 2026

The findings, released Thursday by Asymmetric Security, are just the latest example of rogue behavior spurred by OpenAI’s software.

Researchers find Chinese hacking campaigns targeting AI firms, Asian governments

1 Oct 2026

Two separate reports by cybersecurity companies highlight China-linked hacking operations, including a phishing campaign that impersonated Western experts.

Police disrupt KillSec ransomware, arrest suspected teenage leader

1 Oct 2026

European police said raids against the KillSec ransomware-as-a-service operation included the arrest of a high-profile teen suspect.

Cyberattack on major Polish invoicing platform exposes customer data

1 Oct 2026

One of Poland’s major online invoicing platforms suffered a data breach that may have exposed information belonging to its users, their customers and business partners.

US sanctions 10 over ATM malware scheme tied to Tren de Aragua

30 Sep 2026

Treasury’s Office of Foreign Assets Control (OFAC) targeted multiple Venezuelan nationals and several companies they control that are part of the effort to launder the money stolen from dozens of

Automakers routinely share personally identifiable connected-car data with third parties, report says

30 Sep 2026

A new study reveals fresh details about how drivers are exposed to a web of large corporations participating in the advertising ecosystem.

After reports on suicide deaths, Pentagon puts Cyber Command on notice

30 Sep 2026

An August 31 memo obtained by Recorded Future News shows that the Pentagon's assistant secretary for cyber policy made specific demands of U.S. Cyber Command leadership after reports of a cluster of

Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation

30 Sep 2026

Vulnerability disclosures continue to skyrocket, doubling over the course of the year to more than 10,000 each month, Google researchers warned.

Mobile malware warning from Ukrainian researchers includes iPhone exploit kit

30 Sep 2026

'Hit and run' iPhone malware known as DarkSword is part of a wave of Russian attacks on iOS and Android devices, according to Ukraine's SSSCIP.

Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters

30 Sep 2026

The Russian state-backed hacking group Star Blizzard has expanded its phishing operations this year, using a new technique that makes it easier to infect victims with malware.

US Air Force members given over 6 years in prison for cyber theft of more than $2 million

29 Sep 2026

According to court documents, both men pleaded guilty to wire fraud, identity theft and access device fraud charges in June.

Controversial spyware firm Paragon to go public by end of year

29 Sep 2026

The company plans to close the deal around the end of the year at which point Paragon will begin trading on Nasdaq under the REDLattice umbrella.

OpenAI apologizes for agents breaching Australian government websites without authorization

29 Sep 2026

The artificial intelligence giant acknowledged it botched its response to the incidents and should have done more to promptly notify and work with the Australian government in the days after it

Russian pizza chain with 1,500 locations confirms cyberattack following hacker claims

29 Sep 2026

According to Dodo Pizza, the potentially compromised information included customers’ names, addresses, email addresses, phone numbers, dates of birth and order details.

Arizona Supreme Court says hackers stole residents’ personal data

29 Sep 2026

A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday.

ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns

28 Sep 2026

A vulnerability in a popular line of products from Oracle is being used in a new campaign by the prolific ShinyHunters hacking group, which recently claimed credit for an attack on the FBI’s jobs

New Mexico jury finds Meta deceived consumers about data privacy practices

28 Sep 2026

A New Mexico jury found Facebook violated the law nearly 44 million times by lying to consumers about its data privacy practices.

US, UK warn of exploited Citrix NetScaler zero-day bugs

28 Sep 2026

Incident responders began warning of potential vulnerabilities in NetScaler Gateway products on Saturday before cybersecurity agencies in the Netherlands, U.S. and U.K. released advisories on Sunday

Cyberattack on Polish medical software provider exposes patient data

28 Sep 2026

Hackers stole personal data from a Polish healthcare software provider in the latest cyberattack to hit the country’s medical sector in recent months.

Former US soldier gets nearly six-year sentence for hacking, extorting telecoms

28 Sep 2026

A former soldier in the U.S. Army was sentenced to more than five years in federal prison after pleading guilty to hacking into several telecommunications companies and leaking sensitive records.

Kiteworks urges customers to stop using platform after warning from federal intelligence agencies

25 Sep 2026

Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt

Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings

25 Sep 2026

Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an expansive risk management team charged

Crypto CEO accuses North Korea of stealing $387 million from Bitget platform

25 Sep 2026

The CEO said the company has a User Protection Fund that has over $464 million and those funds will be used to cover the losses.

Cyberattack hits Welsh police force, may have affected staff data

25 Sep 2026

Dyfed-Powys Police in Wales said a cyberattack affecting the force disrupted some non-emergency systems and may have compromised staff information.

Doubts grow over claims OpenAI agent hacked Australian Medicare portal

25 Sep 2026

Researchers are questioning whether an OpenAI agent needed to hack an Australian government health portal to access it, after a review of the website’s archived code found it explicitly directed

Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges

24 Sep 2026

Two executives at a data extraction and digital forensics company that sold several U.S. agencies its software were arrested for allegedly lying about the fact that its technology is made in Russia.

Lawmakers introduce bill for voluntary telecom cyber rules after Salt Typhoon hacks

24 Sep 2026

U.S. Sens. Mark Warner (D-VA) and Ted Cruz (R-TX) introduced the Telecommunications Cybersecurity and Resilience Act on Thursday, arguing that the new effort was necessary in light of the Salt

Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation

24 Sep 2026

Ardit Kutleshi, 28, was extradited from his home country of Kosovo last year after prosecutors accused him and his older brother of running Rydox — an illicit platform used by cybercriminals to

Kyiv internet providers report major outages after Russian attacks damage data centers

24 Sep 2026

At least four internet providers serving Kyiv and other parts of Ukraine suffered partial connectivity losses following Wednesday’s drone attack, according to internet monitoring group NetBlocks.

Astrana latest healthcare tech firm to report data breach to SEC

24 Sep 2026

The healthcare firm Astrana warned regulators that hackers accessed confidential information by impersonating company personnel.

OpenAI agent breached Australian government health website, Albanese says

24 Sep 2026

An OpenAI agent gained “unauthorized access” to “non-public files” from an Australian government health website in June, Prime Minister Anthony Albanese said.

UK regulator to investigate Pornhub parent company for alleged age verification failings

23 Sep 2026

In May, Pornhub began using a new age assurance process to verify some users’ ages, according to an Ofcom press release. The new method relies on signals from Apple that suggest under 18s in the UK

No evidence of successful foreign meddling in 2024 election, spy agencies found

23 Sep 2026

U.S. intelligence officials found no evidence that any foreign adversary successfully interfered in the 2024 presidential election, according to sources familiar with the findings of a classified

Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million

23 Sep 2026

An Armenian national and member of the Ryuk ransomware gang was sentenced to two years in federal prison for his role in launching attacks. Vardanyan personally launched several ransomware attacks

FBI investigating alleged ShinyHunters breach of its jobs site

23 Sep 2026

The ShinyHunters cybercriminal organization on Tuesday replaced agency images on the FBIjobs.gov site with a photo of a Pokemon that has become the group’s defacto mascot.

Latvia arrests suspected hacker for electronics repair company breach

23 Sep 2026

Latvian police arrested a 23-year-old man suspected of hacking at least two companies, stealing personal information and attempting to extort money from the victims.

Burnham announces plan for new UK center to fight disinformation

23 Sep 2026

The United Kingdom will create a new national center "to detect, attribute and disrupt” hostile state disinformation, Prime Minister Andy Burnham announced at the United Nations General Assembly.

Canadian regulator opens probe of IDScan for allegedly violating data privacy laws

22 Sep 2026

The investigation, announced Monday, will probe IDScan’s security practices and whether victim notifications were adequate under Canada’s federal private-sector privacy law, the regulator said in