Policy
-
Hackers Exploit Trimble Cityworks Vulnerability to Breach U.S. Local Governments
Chinese-speaking hackers have breached multiple U.S. local governments by exploiting a patched Trimble Cityworks vulnerability. The incident, attributed to the group UAT-6382, emphasizes the critical need for robust cybersecurity measures.
-
Global Authorities Disrupt Lumma Stealer Malware Operation
A coordinated effort by global authorities and tech companies has disrupted the Lumma Stealer malware operation, impacting its infrastructure and threatening its reach in the cybercrime market.
-
EU Imposes Sanctions on Stark Industries for Cyberactivity Facilitation
The European Union has imposed sanctions on Stark Industries, a web-hosting provider, and its executives for enabling cyberattacks and destabilizing activities that support Russian foreign policy, highlighting ongoing concerns regarding information manipulation and digital warfare.
-
SK Telecom Confirms Massive Malware Breach Impacting Millions of Subscribers
SK Telecom has confirmed a substantial cybersecurity breach affecting the USIM data of around 27 million subscribers, with malware traces dating back to 2022. The company is taking extensive measures to secure its network, including offering free SIM replacements for affected customers.
-
UK Health Officials Urge Tech Suppliers to Sign Cybersecurity Charter Amid Rising Ransomware Threats
UK health officials are urging tech suppliers to enhance cybersecurity measures by signing a public charter, as ransomware threats increasingly jeopardize NHS operations. This initiative underscores the need for cooperation among suppliers to address the rising frequency of cyber incidents impacting healthcare services.
-
FBI Alerts of Deepfake Fraud Campaign Targeting US Officials
The FBI has warned of a fraud campaign using deepfake technology to impersonate U.S. officials, aiming to extract sensitive login information from targets. The agency advises vigilance and verification of communications to prevent falling victim to these sophisticated scams.
-
Meta Faces Legal Challenge Over AI Training Data Amid GDPR Concerns
Meta is facing legal scrutiny as Noyb, a privacy advocacy group, challenges the tech giant’s AI training plans, arguing they violate GDPR. The situation highlights the ongoing conflict over user data consent in Europe.
-
Roblox Faces Class Action Lawsuit Over Alleged Privacy Violations Involving Children’s Data
Roblox is facing legal action for allegedly tracking children’s data without consent, raising concerns under the Children’s Online Privacy Protection Act (COPPA) and highlighting the need for better parental oversight regarding app security.
-
International Cybercrime Ring Disrupted as Four Arrested in Botnet Operation
Four individuals, including three Russians, have been arrested in connection with a global botnet operation that allegedly generated $46 million by selling access to infected routers. The FBI has seized associated domains as international law enforcement partners disable the botnet.
-
GlobalX Airlines Confirms Cybersecurity Breach Within Network Infrastructure
GlobalX Airlines has confirmed a cybersecurity breach that has raised concerns over the potential theft of sensitive passenger data. The charter airline, which operates deportation flights for the US government, activated its incident response protocols to address the unauthorized access detected on May 5, 2025.
