The Record

A cyber-espionage operation attributed to China used the PlugX malware against Belgian and Hungarian diplomatic entities over the last two months, according to a new report.

The comments come roughly a month after the expiration of the 2015 Cybersecurity Information Sharing Act, which incentivized private entities to share threat data with the government with antitrust and liability safeguards.

Available on GitHub and promoted to professional penetration testers, the tool AdaptixC2 has been used to spread loader malware associated with Russian ransomware groups, researchers said.

The move comes after Meta announced that starting on December 16 it will target ads and customize content based on users’ engagement with chatbots.

The former executive sold the trade secrets to a Russian cyber-tools broker that “publicly advertises itself as a reseller of cyber exploits to various customers, including the Russian government,” according to the Department of Justice.

Officers from the Army and Air Force are under consideration to lead the NSA, and moves could be happening soon for other top jobs at the spy agency, sources tell Recorded Future News.

The government contractor Conduent informed multiple states this week that a cybersecurity incident in January exposed the information of more than 10 million people.

The attack, which is the second time the group has hit Russia’s agro industrial firms in recent months, coincided with preparations for the Russian agriculture forum scheduled for the end of the month in Moscow.

Following scrutiny over the safety of the technology for kids and teenagers, Character.AI on Wednesday said that as of next month people under 18 will not be able to use its chatbots.

In two separate incidents this summer, hackers appearing to work from Russia used available assets to steal data from a large Ukrainian business services company and a local government agency, researchers say.

The agency’s decision to approve a proposal released on October 7 means the FCC will broaden the definition of “caller identity information,” implement new requirements for service providers and mandate that providers alert consumers when calls are coming from overseas.

In October alone, the suspected Russia-based group added more than 185 victims to its leak site — claiming to be behind recent cybersecurity incidents at Japanese beverage giant Asahi, the Texas city of Sugar Land, a county government in North Carolina and multiple power companies in Texas.

New Android malware tries to “humanize” the actions attackers perform during remote control.

The sprawling Domain Awareness System violates New York City residents' constitutional rights, an advocacy group says in a lawsuit filed on behalf of people who have an NYPD camera pointed at their home.

The complaint follows several enforcement actions and bans from European data protection authorities that the advocacy group noyb alleges Clearview AI has ignored.

More than 70 countries signed the landmark UN Convention against Cybercrime in Hanoi this weekend, a significant step in the yearslong effort to create a global mechanism to counteract digital crime.

The utility responsible for operating Sweden's power grid is investigating a data breach after a ransomware group threatened to leak hundreds of gigabytes of purportedly stolen internal data.

The Dante spyware from Memento Labs — the successor to the notorious Italian company Hacking Team — was part of espionage operations against targets in Russia and Belarus, researchers at Kaspersky said.

The move by cities to halt their work with Flock follows reports that the company shared data from local partners with federal immigration authorities.

Nita Farahany spoke with Recorded Future News about whether brain data will be commodified and the role artificial intelligence plays in allowing internal speech to be decoded.