Cybersecurity — May 31, 2025

### ConnectWise Breach: A Sophisticated Nation-State Attack ConnectWise, a major provider of IT software, has disclosed a sophisticated cyberattack linked to a nation-state actor, impacting their ScreenConnect customers. This incident highlights the escalating threats facing supply chain networks. As authorities and the company investigate, businesses using similar platforms are advised to bolster their security measures immediately. [Read more](https://securityaffairs.com/178442/hacking/connectwise-cyberattack-sophisticated-nation-state-actor.html) ### Australia Imposes Mandatory Ransomware Payment Disclosure Australia has become the first country mandating ransomware payment disclosures, enforcing transparency among victim organizations. This unprecedented move is designed to help in combating ransomware by gathering data to develop strategic defenses at a national level. Organizations are now required to report payments to attackers if their turnover meets a specified threshold. [Read more](https://therecord.media/australia-ransomware-victims-must-report-payments) ### US Arrests Military IT Specialist for Espionage A U.S. military IT specialist has been arrested for allegedly leaking classified information to a foreign government, underlining insider threats in cybersecurity. The incident raises alarm over the security of sensitive information within government agencies and the need for robust measures against internal vulnerabilities. [Read more](https://therecord.media/defense-intelligence-agency-it-specialist-suspected-leak-foreign-government) ### Google Revokes Certificates from Untrustworthy CAs Google Chrome is set to distrust certificates from Chunghwa Telecom and Netlock starting August 2025 due to repeated non-compliance with security standards. This move stresses the critical role certificate authorities (CAs) play in internet safety and encourages diligent monitoring of digital certificates for potential security lapses. [Read more](http://security.googleblog.com/2025/05/sustaining-digital-certificate-security-chrome-root-store-changes.html) ### You May Also Be Interested In... - **US Treasury Sanctions Funnull Technology for Scam Facilitations**: The US Treasury has sanctioned Funnull Technology for enabling cryptocurrency fraud, impacting countless individuals. [Read more](https://securityaffairs.com/178442/hacking/connectwise-cyberattack-sophisticated-nation-state-actor.html) - **DDoS Attack Disrupts Major Russian ISP**: Pro-Ukraine groups are suspected behind the DDoS attacks that caused significant outages for ASVT customers in Moscow. [Read more](https://therecord.media/moscow-internet-provider-asvt-ddos-attack) - **Meta Takes Down Influence Operations from China and Iran**: Meta disrupts low-impact but persistent influence operations, reinforcing its commitment to counter foreign interference. [Read more](https://therecord.media/meta-influence-operations-takedown-china-iran-romania) - **TSA Issues Advisory for Mobile Users**: A reminder issued by TSA highlights risky mobile usage practices as users travel, urging vigilance this travel season. [Read more](https://www.forbes.com/sites/zakdoffman/2025/05/30/tsa-warns-iphone-and-android-users-you-need-this-at-airport/) Stay informed and ahead of emerging threats with regular updates and expert insights in cybersecurity.

A clearer view of today.

Your briefing

A clearer view of today.

Your briefing

Make room for a smarter morning.