
Arctic Wolf identified a year‑long espionage campaign, dubbed SloppyLemming, that targeted government agencies and critical infrastructure in Pakistan, Bangladesh and Sri Lanka starting in January 2025. The group delivered malicious PDFs containing the BurrowShell backdoor and Excel files with keyloggers, using 112 Cloudflare‑hosted domains that mimicked local government entities. Researchers linked the actor to India‑nexus threat groups such as CrowdStrike’s Outrider Tiger, noting a focus on nuclear regulators, energy utilities, and telecom operators. Overlaps with earlier Cloudflare and Trellix findings suggest a coordinated, state‑aligned effort.

The UK’s National Cyber Security Centre (NCSC) has issued an advisory warning British organisations of a heightened indirect cyber threat from Iran following a joint U.S.-Israeli airstrike that killed Iran’s Supreme Leader. While the agency sees no immediate surge in...

Russia’s internet regulator Roskomnadzor and the Defense Ministry suffered a large distributed denial‑of‑service (DDoS) attack that briefly took down several government websites. The agency described the assault as a complex multi‑vector operation originating from servers and botnets in Russia, the...

Samsung has agreed to stop collecting and processing Automated Content Recognition (ACR) viewing data on its smart TVs in Texas unless consumers give explicit consent, resolving the state’s lawsuit filed in December. The company will roll out clear disclosure and...

Senator Ron Wyden announced he will block the Senate’s confirmation of Lt. Gen. Joshua Rudd as head of U.S. Cyber Command and the National Security Agency. Wyden argues Rudd lacks any digital‑warfare or signals‑intelligence background and gave vague answers on...

The Federal Trade Commission issued a policy statement saying it will not pursue enforcement actions against websites that use age‑verification tools, provided they follow strict safeguards. The exemption applies only when age data is used solely for verification, is not...

PowerSchool and Chicago Public Schools have agreed to a $17.25 million settlement to resolve a class‑action lawsuit accusing the ed‑tech firm of covertly recording student communications. The fund will be divided among more than 10 million potential class members and obligates PowerSchool...

A senior FBI official announced the United States is fully committed to leading a global fight against transnational criminal networks operating large‑scale scamming compounds in Southeast Asia. The FBI’s International Operations Division has been meeting with law‑enforcement counterparts in Thailand,...

Ukrainian officials are urging tighter regulation of Telegram after Russian intelligence allegedly used the app to recruit saboteurs for attacks, including a deadly Lviv strike that killed a police officer. Interior Minister Ihor Klymenko and SBU deputy head Ivan Rudnytskyi...

Russian cyber actors targeting Ukraine’s energy grid have shifted from causing immediate outages to gathering intelligence that guides missile strikes. By mapping facilities, tracking repair crews, and monitoring recovery rates, they provide real‑time data that improves strike accuracy. The number...

Romanian officials say recent ransomware attacks on the country’s water agency, oil pipeline operator and coal‑based power producer were part of a coordinated Russian hybrid operation. Groups such as Qilin and Gentlemen, which speak Russian, claimed responsibility, linking the attacks...

Ukraine’s National Bank temporarily shut down its online collectible‑coin store after a cyberattack compromised customer registration data. Attackers accessed personal details such as names, phone numbers, email and delivery addresses through a contractor that supports the storefront, but no financial...

Poland’s senior army commanders have issued a directive barring Chinese‑manufactured cars from entering protected military facilities. The move targets vehicles whose sensors, software or connectivity modules could transmit location and other sensitive data. It aligns Poland with recent U.S. and...

Ukraine introduced a national verification system for Starlink terminals, disconnecting any unregistered devices in its territory. The move followed evidence that Russian forces were mounting Starlink‑enabled kamikaze drones, making them harder to jam. Since the crackdown, Ukrainian officials report a...