キタきつね

@kitafox.bsky.social

16 hours ago

Mercor confirms security incident tied to LiteLLM supply chain attack Although the LiteLLM attack was reportedly tied to a group called TeamPCP, the hacking gang Lapsus$ claimed on its website that it obtained hundreds of gigabytes of Mercor’s data.

Mercor社は、LiteLLMサプライチェーン攻撃に関連したセキュリティインシデントを確認した

Mercor confirms security incident tied to LiteLLM supply chain attack #TheRecord (Apr 2)

therecord.media/mercor-confi...

キタきつね

@kitafox.bsky.social

1 day ago

WhatsApp warns users of fake app used to distribute spyware The Meta subsidiary alleges that Italy’s SIO spyware manufacturer designed the phony app specifically for iPhones. Most of the impacted users are in Italy, according to a WhatsApp announcement.

WhatsAppは、スパイウェアを配布するために使用される偽アプリについてユーザーに警告を発した

WhatsApp warns users of fake app used to distribute spyware #TheRecord (Apr 2)

therecord.media/whatsapp-war...

キタきつね

@kitafox.bsky.social

1 day ago

Nissan says stolen data came from third-party vendor after hacking group claims breach A hacking group claimed this week to have breached the file-transfer system used by a company that offers services to Nissan and Infiniti dealerships across North America. Nissan said there was no…

ハッカー集団が情報漏洩を主張した後、日産は盗まれたデータは第三者ベンダーから来たものだと述べた

Nissan says stolen data came from third-party vendor after hacking group claims breach #TheRecord (Apr 2)

therecord.media/nissan-hacke...

キタきつね

@kitafox.bsky.social

2 days ago

North Dakota water treatment plant reports March ransomware attack A water treatment plant in the city of Minot, North Dakota, was hit with ransomware but city officials said it continues to operate normally.

ノースダコタ州の浄水場が3月にランサムウェア攻撃を受けたと報告

North Dakota water treatment plant reports March ransomware attack #TheRecord (Apr 2)

therecord.media/north-dakota...

キタきつね

@kitafox.bsky.social

2 days ago

Hasbro takes some systems offline after cybersecurity incident The company filed a notice with the Securities Exchange Commission (SEC) on Wednesday warning investors that its IT team discovered unauthorized access on March 28.

ハズブロ社、サイバーセキュリティインシデント発生後、一部システムをオフラインにする

Hasbro takes some systems offline after cybersecurity incident #TheRecord (Apr 2)

therecord.media/hasbro-takes...

キタきつね

@kitafox.bsky.social

2 days ago

Crypto platform Drift suspends services after millions stolen in security incident Security experts believe hundreds of millions of dollars worth of cryptocurrency were stolen from decentralized finance platform Drift on Wednesday after the site confirmed it was experiencing a…

セキュリティインシデントで数百万ドルが盗まれた後、暗号資産プラットフォームのDriftがサービスを停止

Crypto platform Drift suspends services after millions stolen in security incident #TheRecord (Apr 2)

therecord.media/drift-crypto...

キタきつね

@kitafox.bsky.social

3 days ago

Google links axios supply chain attack to North Korean group Google Threat Intelligence Group (GTIG) joined several other researchers in attributing the attack to a North Korean threat actor they call UNC1069. SentinelOne found the same group using macOS-based…

Googleは、Axiosのサプライチェーン攻撃を北朝鮮のグループと関連付けた

Google links axios supply chain attack to North Korean group #TheRecord (Apr 1)

therecord.media/google-links...

キタきつね

@kitafox.bsky.social

3 days ago

Pro-Russian hackers pose as Ukraine's cyber agency to target government, businesses A pro-Russian hacker group impersonated Ukraine’s national cyber incident response team in a phishing campaign targeting government agencies, businesses, and other institutions, Ukrainian…

親ロシア派ハッカーがウクライナのサイバー機関を装い、政府や企業を標的に攻撃

Pro-Russian hackers pose as Ukraine's cyber agency to target government, businesses #TheRecord (Mar 31)

therecord.media/pro-russian-...

キタきつね

@kitafox.bsky.social

3 days ago

New criminal service plans to monetize data stolen by ransomware gangs A site called Leak Bazaar pitches itself as something closer to a data-processing business than a typical hacking or ransomware-as-a-service operation.

新たな犯罪捜査機関が、ランサムウェア集団に盗まれたデータを収益化する計画を立てている

New criminal service plans to monetize data stolen by ransomware gangs #TheRecord (Mar 31)

therecord.media/new-criminal...

キタきつね

@kitafox.bsky.social

4 days ago

FBI confirms theft of director’s personal emails by Iran-linked hacking group An FBI spokesperson told Recorded Future News that the information is “historical in nature and involves no government information,” adding that the agency has “taken all necessary steps to mitigate…

FBIは、イラン関連のハッカー集団による局長の個人メールの盗難を確認した

FBI confirms theft of director’s personal emails by Iran-linked hacking group #TheRecord (Mar 28)

therecord.media/fbi-confirms...

キタきつね

@kitafox.bsky.social

4 days ago

US official accuses China of supporting, exploiting cyber scam crisis in Southeast Asia A senior U.S. official accused China’s government of implicitly backing Chinese criminal syndicates running cyber scam compounds across Southeast Asia and of exploiting a crisis that has resulted in…

米国当局者、中国が東南アジアのサイバー詐欺危機を支援・悪用していると非難

US official accuses China of supporting, exploiting cyber scam crisis in Southeast Asia #TheRecord (Mar 27)

therecord.media/china-scam-c...

キタきつね

@kitafox.bsky.social

4 days ago

Apple rolls out age verification to UK iPhone users The age filters will be turned on by default, meaning that all users — including adults — will have to prove their age via credit card and other payment methods on file or by submitting an ID to be…

Apple、英国のiPhoneユーザー向けに年齢確認機能を導入

Apple rolls out age verification to UK iPhone users #TheRecord (Mar 27)

therecord.media/apple-rolls-...

キタきつね

@kitafox.bsky.social

1 week ago

CISA's acting chief warns shutdown is increasing cyber risks, causing resignations With CISA’s reduced capacity during the shutdown, Andersen said, the agency is largely limited to responding to imminent threats, protecting life and property, sharing critical vulnerability and…

CISAの暫定長官は、政府機関閉鎖がサイバーリスクを高め、辞任者を出していると警告した

CISA's acting chief warns shutdown is increasing cyber risks, causing resignations #TheRecord (Mar 26)

therecord.media/cisa-acting-...

キタきつね

@kitafox.bsky.social

1 week ago

Ransomware attack disrupts operation at major Spanish fishing port A ransomware attack has disrupted digital systems at Spain’s Port of Vigo, forcing authorities to disconnect parts of its network and temporarily manage cargo operations manually.

ランサムウェア攻撃により、スペインの主要漁港の操業が中断

Ransomware attack disrupts operation at major Spanish fishing port #TheRecord (Mar 26)

therecord.media/port-of-vigo...

キタきつね

@kitafox.bsky.social

1 week ago

UK cyber chief urges ‘full court press’ to counter rising cyber threats In a keynote speech at the RSA Conference, National Cyber Security Centre (NCSC) CEO Richard Horne said cyber risks are now “of greater consequence than ever before."

英国のサイバーセキュリティ責任者、増大するサイバー脅威に対抗するため「総力戦」を呼びかけ

UK cyber chief urges ‘full court press’ to counter rising cyber threats #TheRecord (Mar 25)

therecord.media/uk-cyber-chi...

キタきつね

@kitafox.bsky.social

1 week ago

Stryker says malware was involved in recent cyberattack as production lines reopen The medical device firm Stryker said it is ramping production lines back up two weeks after alleged Iranian cyber actors wiped more than 200,000 company devices.

ストライカー社は、生産ライン再開に伴う最近のサイバー攻撃にマルウェアが関与していたと発表した

Stryker says malware was involved in recent cyberattack as production lines reopen #TheRecord (Mar 25)

therecord.media/stryker-cybe...

キタきつね

@kitafox.bsky.social

1 week ago

Vibe coding could reshape SaaS industry and add security risks, warns UK cyber agency Britain’s National Cyber Security Centre warned that a rise in so-called “vibe coding” could reshape the software-as-a-service industry while introducing new cybersecurity risks if organizations fail…

英国のサイバーセキュリティ機関は、バイブコーディングがSaaS業界を再構築し、セキュリティリスクを高める可能性があると警告している

Vibe coding could reshape SaaS industry and add security risks, warns UK cyber agency #TheRecord (Mar 25)

therecord.media/vibe-coding-...

キタきつね

@kitafox.bsky.social

1 week ago

Anime streaming giant Crunchyroll says hacker stole data related to customer service tickets The popular anime streaming platform Crunchyroll confirmed that a batch of customer information that was stolen through a third-party customer service vendor and leaked online is legitimate.

アニメ配信大手Crunchyrollは、ハッカーがカスタマーサービスチケットに関連するデータを盗んだと発表した

Anime streaming giant Crunchyroll says hacker stole data related to customer service tickets #TheRecord (Mar 24)

therecord.media/crunchyroll-...

キタきつね

@kitafox.bsky.social

1 week ago

Hacker walks away with $24.5 million after breaching Resolv DeFi platform In a message to the attacker on the blockchain, Resolv offered the person 10% of the $24.5 million in ETH if they returned the rest and ceased all further activity with the exploited funds.

ハッカーがResolv DeFiプラットフォームに侵入し、2450万ドルを盗み出す

Hacker walks away with $24.5 million after breaching Resolv DeFi platform #TheRecord (Mar 24)

therecord.media/hacker-breac...

キタきつね

@kitafox.bsky.social

1 week ago

California-based semiconductor testing company reports ransomware attack to SEC A semiconductor testing company warned regulators that its subsidiary in Singapore suffered a ransomware attack earlier this month.

カリフォルニア州に拠点を置く半導体試験会社がランサムウェア攻撃をSECに報告

California-based semiconductor testing company reports ransomware attack to SEC #TheRecord (Mar 24)

therecord.media/ransomware-t...

キタきつね

@kitafox.bsky.social

1 week ago

Education company Kaplan reports data breach impacting more than 230,000 The educational services company Kaplan told state regulators that at least 230,000 people had Social Security and driver’s license numbers leaked following a cybersecurity incident in the fall of…

教育会社カプラン、23万人以上に影響を与えるデータ侵害を報告

Education company Kaplan reports data breach impacting more than 230,000 #TheRecord (Mar 24)

therecord.media/kaplan-data-...

キタきつね

@kitafox.bsky.social

1 week ago

Education company Kaplan reports data breach impacting more than 230,000 The educational services company Kaplan told state regulators that at least 230,000 people had Social Security and driver’s license numbers leaked following a cybersecurity incident in the fall of…

教育会社カプラン、23万人以上に影響を与えるデータ侵害を報告

Education company Kaplan reports data breach impacting more than 230,000 #TheRecord (Mar 24)

therecord.media/kaplan-data-...

キタきつね

@kitafox.bsky.social

1 week ago

FBI warns of Russian, Iranian cyber activity involving messaging platforms The FBI issued warnings about separate Russian and Iranian cyber campaigns involving social media messaging platforms like Signal and Telegram.

FBIは、メッセージングプラットフォームを巡るロシアとイランのサイバー活動について警告を発した

FBI warns of Russian, Iranian cyber activity involving messaging platforms #TheRecord (Mar 24)

therecord.media/russia-iran-...

キタきつね

@kitafox.bsky.social

1 week ago

FBI, CISA warn on Microsoft Intune risks after Iran-linked cyberattack on Stryker The attackers behind a recent attack on Stryker did not use malware, instead breaking into a legitimate Microsoft device management system called Intune and wiping the company’s data that way.

FBIとCISAは、ストライカー社に対するイラン関連のサイバー攻撃を受け、Microsoft Intuneのリスクについて警告を発した

FBI, CISA warn on Microsoft Intune risks after Iran-linked cyberattack on Stryker #TheRecord (Mar 20)

therecord.media/fbi-cisa-war...

キタきつね

@kitafox.bsky.social

2 weeks ago

Energy Department set to release its first-ever cyber strategy Alex Fitzsimmons, the acting director of the Office of Cybersecurity, Energy Security, and Emergency Response (CESER), said the plan is meant to supplement the recently-published national cyber…

エネルギー省が初のサイバー戦略を発表予定

Energy Department set to release its first-ever cyber strategy #TheRecord (Mar 18)

therecord.media/energy-depar...

キタきつね

@kitafox.bsky.social

2 weeks ago

New York cyber regulations for water organizations to take effect in 2027 The new rules for water and wastewater entities in New York include mandatory cybersecurity training for certified operators, incident response plans and reporting requirements.

ニューヨーク州の水道事業体向けサイバー規制は2027年に施行される

New York cyber regulations for water organizations to take effect in 2027 #TheRecord (Mar 14)

therecord.media/new-york-wat...

キタきつね

@kitafox.bsky.social

3 weeks ago

Iranian influence operation using fake personas to deceive US Instagram users disrupted, Meta says Meta said it disrupted an influence operation linked to Iran that used “sophisticated fake personas” on Instagram to build relationships with U.S. users before introducing political messaging.

メタによると、偽のペルソナを使って米国のインスタグラムユーザーを騙すイランの影響力作戦は阻止された

Iranian influence operation using fake personas to deceive US Instagram users disrupted, Meta says #TheRecord (Mar 11)

therecord.media/iran-instagr...

キタきつね

@kitafox.bsky.social

3 weeks ago

New White House cyber strategy pledges to ease regulations, ‘impose costs’ on bad actors The White House unveiled its National Cyber Strategy, pledging more offensive cyber actions against criminal networks and adversarial governments.

ホワイトハウスの新しいサイバー戦略は、規制を緩和し、悪質な行為者に「コストを課す」ことを約束している

New White House cyber strategy pledges to ease regulations, ‘impose costs’ on bad actors #TheRecord (Mar 10)

therecord.media/trump-cyber-...

キタきつね

@kitafox.bsky.social

3 weeks ago

Finnish intelligence warns of persistent cyber espionage from Russia, China Cyberespionage remains the country’s most significant digital threat, with attackers targeting government systems, research institutions and companies developing advanced technologies, according to a…

フィンランド諜報機関はロシアと中国による執拗なサイバースパイ活動に警告

Finnish intelligence warns of persistent cyber espionage from Russia, China #TheRecord (Mar 10)

therecord.media/finnish-inte...

キタきつね

@kitafox.bsky.social

3 weeks ago

CISA shortens patch deadline for critical Ivanti, SolarWinds bugs The Cybersecurity and Infrastructure Security Agency (CISA) gave all federal civilian agencies until Thursday to patch CVE-2025-26399 — a critical vulnerability impacting the popular SolarWinds Web…

CISA、IvantiとSolarWindsの重大なバグに対するパッチ適用期限を短縮

CISA shortens patch deadline for critical Ivanti, SolarWinds bugs #TheRecord (Mar 10)

therecord.media/cisa-shorten...