Therecord

Lawmakers warn a proposed Google-Spirit AI training deal could include 100M emails and 500M Teams messages, risking sensitive exposure.

Russia-aligned actors refined malware targeting Ukrainian transportation, manufacturing and energy sectors to harvest system instrumentation and data.

Ukraine's ATB grocery chain confirms cyberattack with attackers threatening data leaks and extortion demands.

Ransomware impacted University of Illinois Chicago College of Medicine, with data theft reported from servers.

Belarusian Cyber Partisans reportedly conducted a two-year espionage campaign within Russian healthcare networks for intel and disruption.

Osaka Metropolitan University cancels classes after a ransomware outage affecting internal network, email and academic systems.

South Korea believes AI-assisted tools were used in breaches exposing data for at least seven banks and 68,000 people.

Polish online invoicing platform breached, exposing user, customer, and business partner data across accounts.

Astrana disclosed to the SEC that hackers impersonated staff and accessed confidential healthcare company systems.

Anonymous group claims to have breached systems linked to Russia's election infrastructure just before parliamentary voting begins.

A Bavarian municipal utility's internal IT systems were encrypted, operations unaffected but recovery ongoing after cyberattack.

Aesto data breach leaked sensitive health information of more than 9.5 million people, reported to regulators after discovery.

Fire Ant compromised Cisco routers and the trust layer, using them to forward traffic, steal credentials, and blind logs.

Kaspersky links NodeRabbit malware to Iranian espionage campaigns targeting aviation and fintech developers in multiple countries.

Massive DDoS disrupted Norway's government digital services, taking multiple public-facing systems offline.

US sanctions Iranian cyber actors while the UK discloses a cyber intrusion that disrupted a small power plant.

Latvian road traffic agency breach exposed vehicle data affecting ~two-thirds of population, prompting official resignations.

CareCloud confirms breach affecting 3.7 million patients after eight-hour intruder access to EHR environment.

CISA ordered federal agencies to patch a Microsoft bug exploited in a long-running DPRK job-application campaign within two weeks.