The Record

Canadian police department becomes first to trial body cameras equipped with facial recognition technology The cameras, made by the police technology juggernaut Axon Enterprise, were deployed on a trial basis by as many as 50 officers on Wednesday, according to local news reports.

Edmonton police are the first to trial equipping officers with body cameras that use facial recognition technology therecord.media/canadian-pol...

Japan’s Askul resumes limited online sales 6 weeks after ransomware attack Askul said Wednesday that corporate customers can now purchase a limited range of products on its platform and the company plans to gradually add more items as it restores its systems.

Customers of the Japanese office and household goods retailer Askul had been forced to place orders through fax, and the company said deliveries may be slower than usual due to ransomware recovery efforts therecord.media/askul-resume...

DOJ takes down Myanmar scam center website spoofing TickMill trading platform The FBI said several victims used the domain and told agents that they were shown lucrative returns on what they thought were legitimate investments.

Scammers tied to an armed group in Myanmar spoofed a forex and commodities trading platform to siphon money from victims therecord.media/doj-takes-do...

EU’s top court rules that online marketplaces are responsible for processing of data in ads The ruling stems from a 2018 case in Romania involving an online marketplace which published a fake ad featuring personal information belonging to a woman the ad placer said was a prostitute.

A ruling from the EU's top court means that online marketplaces must screen and verify all ads before publication, particularly when they contain personal data therecord.media/eu-top-court...

Iran-linked hackers target Israeli, Egyptian critical infrastructure through phishing campaign Active between September 2024 and March 2025, the operation primarily targeted organizations in Israel’s technology, engineering, local government, educational and manufacturing sectors.

A new backdoor called MuddyViper allowed Iran-linked attackers to exfiltrate login credentials and browser data, as well as execute files and shell commands at organizations in Israel and Egypt therecord.media/iran-linked-...

India faces backlash over government cyber safety app mandate Telecom Minister Jyotiraditya Scindia said Tuesday the system was optional and denied the app could be used for monitoring

Companies and privacy advocates have pushed back against a recent Indian mandate for smartphone makers to install a government "cyber safety" app on devices therecord.media/india-faces-...

Officials accuse North Korea’s Lazarus of $30 million theft from crypto exchange Yonhap News Agency reported on Friday that South Korean government officials are involved in the investigation surrounding $30 million worth of cryptocurrency that was stolen from Upbit on Wednesday e...

South Korean officials said North Korea's Lazarus hacking group was likely involved in a recent cyberattack on South Korea's largest cryptocurrency exchange therecord.media/officials-ac...

Japanese beer giant Asahi says ransomware attack may have exposed data of 1.5 million people The company said the compromised information includes names, gender, addresses and phone numbers, but not credit-card details.

Asahi says a ransomware attack it experienced in late September may have exposed data including names and addresses of about 1.5 million customers therecord.media/asahi-says-r...

Poland detains Russian citizen suspected of hacking local firms The suspect, whose identity has not been disclosed, illegally crossed into Poland in 2022 and obtained refugee status the following year.

Polish police arrested a Russian citizen it accused of breaching security systems to gain access to company databases, potentially aimed at disrupting operations therecord.media/poland-detai...

House Energy and Commerce Committee unveils new draft children’s online safety bill Instead of a duty of care, the KOSA draft includes language saying that platforms must establish and maintain “reasonable policies, practices, and procedures” that address harms to minors, including t...

House lawmakers introduced several new bills designed to protect kids online after a previous proposal stalled due to concerns over freedom of speech therecord.media/house-commtt...

Hackers knock out systems at Moscow-run postal operator in occupied Ukraine Donbas Post, which operates in the Russian-controlled parts of Donetsk and Luhansk, said the incident affected its corporate network, web platform and email systems. The company had restricted access ...

A Russian state-owned postal operator in occupied portions of Ukraine said its corporate network, web platform and email systems were impacted by a cyber incident therecord.media/hackers-knoc...

Salesforce cuts off access to third-party app after discovering ‘unusual activity’ Salesforce posted a message on its website saying an investigation revealed that the activity “may have enabled unauthorized access to certain customers’ Salesforce data through the app’s connection.”

Salesforce told customers that it discovered "unusual activity" related to a third-party application, and warned that it may have enabled unauthorized access to certain data therecord.media/salesforce-c...

Privacy oversight board finds FBI does not buy real-time location data The report, which is based on an investigation begun by the Privacy and Civil Liberties Oversight Board (PCLOB) in 2017, provides an overview of what open-source information the FBI consults in such i...

The independent watchdog agency known as PCLOB found in a report issued Thursday that the FBI does not buy real-time location data for use in counterterrorism investigations therecord.media/pclob-finds-...

New Android malware can capture private messages, researchers warn The malware can monitor everything displayed on a phone in real time — including contacts, full message threads and the content of encrypted chats — by accessing data after it has been decrypted by le...

Researchers say a new strain of Android malware can allow hackers to view everything that appears on an infected device's screen — including private messages and other sensitive data therecord.media/new-android-...

NSO seeks to overturn WhatsApp case, saying it is ‘catastrophic’ for the spyware maker In a court filing ahead of the ruling, NSO told the judge that blocking it from targeting WhatsApp infrastructure to implant its spyware could “put NSO’s entire enterprise at risk” and “force NSO out ...

Spyware developer NSO Group asked a judge to overturn a recent decision involving the targeting of WhatsApp users, saying it would cause the firm "irreparable" damage therecord.media/nso-seeks-to...

Russia blacklists S.T.A.L.K.E.R. game developer, accusing it of aiding Ukraine’s war effort The Prosecutor General’s Office accused the game’s developer, GSC Game World, of financing Ukraine’s armed forces — alleging it transferred about $17 million to the military in 2022.

The move potentially criminalizes Russians who buy and support products from the game developer, which has a large following within the country therecord.media/russia-black...

Samourai Wallet crypto mixer’s co-founders sentenced to prison The pair had pleaded guilty in late July to participating in a conspiracy “to operate a money transmitting business in which they knowingly transmitted criminal proceeds.”

Co-founders of a crypto mixing site that handled more than $237 million in illegal transactions were each sentenced to several years in prison and ordered to forfeit more than $6.3 million in the fees they earned therecord.media/samourai-wal...

International operation traces $55 million crypto trail of digital piracy sites Thirty investigators from 15 countries took part in the five-day crackdown earlier this month targeting 69 digital piracy sites, including 25 illegal streaming services whose information was referred ...

An international crackdown used cryptocurrency to buy access to pirated materials in order to gain a window into the financial infrastructure of dozens of piracy sites therecord.media/internationa...

Canadian privacy regulators say schools share blame for PowerSchool hack The Ontario and Alberta information and privacy commissioners’ reports fault the school systems for several missteps, including not putting privacy and security related provisions in their contracts w...

The information and privacy commissioners for Ontario and Alberta said schools should have taken additional steps to protect student data that was breached in a hack on education software firm PowerSchool therecord.media/canadian-pri...

European Commission ‘simplification’ proposal would weaken GDPR, AI regulations Under the proposal, the EU would weaken data protection rules by delaying when regulations governing high-risk AI systems take effect and allowing companies to use personal data for AI training withou...

European privacy advocates say a new proposal aimed at simplifying GDPR and AI regulations would weaken several key EU privacy protections therecord.media/european-com...

National cyber strategy will include focus on ‘shaping adversary behavior,’ White House official says The upcoming strategy would contain six “pillars” — with one focused on “shaping adversary behavior” and another on public-private partnerships, Sean Cairncross said.

The White House cyber czar said his office is "pressing to get things moving as quickly as we can" on a coordinated cyber strategy that will likely contain six pillars therecord.media/national-cyb...

MI5 warns of Chinese spies using LinkedIn to gain intel on lawmakers The alert identifies two specific LinkedIn profiles, featuring fake personas, that are being used by China’s Ministry of State Security in an attempt to build relationships in Westminster and gain int...

MI5 warned British lawmakers that Chinese spies were using fake accounts on LinkedIn in an attempt to gain intelligence and build relationships with politicians therecord.media/mi5-warns-ch...

Logitech discloses data breach after Clop claims The filing comes one week after the Clop cybercriminal organization claimed it stole information from Logitech through a zero-day vulnerability in Oracle’s E-Business Suite tool.

Logitech said hackers exploited a zero-day vulnerability in a third-party software platform to copy data from its internal IT system therecord.media/logitech-dis...

Princeton University says database containing donor, alumni info breached Information including names, email addresses, telephone numbers, and home and business addresses is stored on the database, in addition to donation information.

Princeton University said a database containing donor information was breached, but it did not include data such as Social Security numbers, financial account information or student records therecord.media/princeton-do...

Cyberattack on Russian port operator aimed to disrupt coal, fertilizer shipments The goal, Port Alliance claimed, was to “destabilize operations and disrupt business processes” tied to exports of coal and mineral fertilizers through its seaports in the Baltic, Azov–Black Sea, Far ...

A Russian port operator said its terminals and facilities continued to operate despite a days-long cyberattack aimed at disrupting its coal and fertilizer shipments therecord.media/cyberattack-...

Suspected Russian hacker reportedly detained in Thailand, faces possible US extradition Russian news reports and Thai sources said police had detained an alleged Russian hacker on the island of Phuket and transferred him to Bangkok for possible transfer to the U.S.

Russian news reports and Thai sources said police had detained an alleged Russian hacker on the island of Phuket and transferred him to Bangkok for possible transfer to the U.S. therecord.media/russian-hack...

Phishing campaign targets customers of major Italian web hosting provider The operation used a sophisticated phishing kit designed to impersonate the login and payment pages of Aruba S.p.A., stealing customer credentials and credit card details.

An Italian web hosting and IT service provider serving more than 5.4 million customers was targeted by a widespread phishing campaign that used a variety of techniques to evade security tools therecord.media/phishing-cam...

‘Advanced’ hacker seen exploiting Cisco, Citrix zero-days The hackers notably used custom malware and were exploiting CVE-2025-5777 — now known colloquially as “Citrix Bleed Two” — before it was disclosed publicly in July.

Cybersecurity professionals at Amazon said they discovered hackers exploiting previously undisclosed zero-day vulnerabilities that could have provided them with administrator-level access to compromised systems therecord.media/advanced-hac...

Google files lawsuit to disrupt massive ‘Lighthouse’ smishing scheme According to the tech giant, the accused criminals developed the “Lighthouse” phishing kit, which provides custom tools to scammers to deploy “smishing” — or SMS phishing — attacks and to build fraudu...

Google took legal action against a cybercriminal organization behind SMS scams — often claiming to come from USPS or toll agencies — that has been used to compromise millions of credit cards therecord.media/google-files...

German extremist arrested over operating alleged darknet assassination marketplace The 49-year-old German-Polish national, identified only as Martin S., was detained in Dortmund earlier this week, according to the Federal Prosecutor’s Office.

German prosecutors said a far-right extremist was operating an online platform that collected cryptocurrency donations to fund the killings of elected officials, including former chancellors therecord.media/german-extre...