The twists and turns of Trump’s 2025 war on unions

·

The Trump administration in 2025 made excising or otherwise cracking down on unions a focal point of its push to overhaul the federal workforce.

The campaign began in February, when the Office of Personnel Management issued guidance encouraging agencies to disregard collective bargaining agreements when implementing President Trump’s January memo barring most telework.

And the following month, the Homeland Security Department sought to ban collective bargaining at the Transportation Security Administration, where union rights had been administratively granted and expanded during the Obama and Biden administrations, respectively. And Trump signed an executive order banning unions across 40 agencies under the auspices of national security, effectively stripping two-thirds of the federal workforce of their right to bargain collectively.

In the months since, labor groups have fought to retain their foothold within agency workforces across a myriad of court cases. Though judges have issued at least a dozen decisions in favor of unions, mostly citing First Amendment violations, appellate courts have put most of those decisions on hold, allowing agencies to implement the edict and its August follow-up.

These stories track how the administration’s campaign against federal unions has played out across agencies, courts and Congress.

]]>

¶¶¶¶¶

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites

·

Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that come with capabilities to intercept traffic and capture user credentials. The extensions are advertised as a “multi-location network speed test plug-in” for developers and foreign trade personnel. Both the browser add-ons are available for download as of

¶¶¶¶¶

Ransomware Hits Romanian Water Authority, 1000 Systems Knocked Offline

·

Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, europe, IoT, National Water Agency, OT, Romania, Security, vulnerability

Romania’s national water authority, Romanian Waters, was hit by a major ransomware attack affecting 1,000 systems but dams remain safe. Learn how authorities are fighting back without paying the ransom.

¶¶¶¶¶

Penetration Testing In The Boardroom

·

Blogs

This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Dec. 23, 2025

–Read the full story from BreachLock

Penetration testing is one of the very few ways to evaluate how attackers would compromise your environment without actually experiencing an incident.

To position pentesting as a strategic investment, CISOs and security leaders are challenged to move the conversation away from “What does this cost?” and toward “What does this help us prevent?” The silver lining in that challenge is that pentesting directly protects revenue, customer trust, and operational continuity, which are all things boards already prioritize.

When the value of pentesting is universally understood, it shifts from an annual cost to a catalyst for proactive risk reduction that enables both security and business goals.

When reframed this way, it becomes far easier to justify investments in modern pentesting approaches like Penetration-Testing-as-a-Service, commonly known as PTaaS, security testing automation with manual, human-delivered pentesting, and in some cases, AI.

In a recent blog post, BreachLock, an award-winning cybersecurity company, presents a pentesting ROI formula that can be used internally to quantify savings in order to make your case for PTaaS far more defensible. While you may not present this formula to the board, it can definitely help a CISO prepare a compelling boardroom presentation.

Read the Full Story

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.

NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.

HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.

VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.

M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.

BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).

PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.

PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.

RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

The post Penetration Testing In The Boardroom appeared first on Cybercrime Magazine.

¶¶¶¶¶

INTERPOL Dismantles Six Ransomware Operations, Detains 500+ Individuals

·

cyber security, Cyber Security News

Law enforcement agencies across 19 countries have made a significant breakthrough in combating cybercrime, arresting 574 suspects and recovering approximately USD 3 million during a month-long coordinated operation across Africa. The crackdown underscores the escalating threat of ransomware, business email compromise (BEC), and digital extortion schemes plaguing the continent. Operation Sentinel, conducted from October 27 […]

The post INTERPOL Dismantles Six Ransomware Operations, Detains 500+ Individuals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

HardBit 4.0 Ransomware Abuses Unsecured RDP and SMB for Access Persistence

·

cyber security, Cyber Security News, Ransomware

HardBit ransomware continues its evolution with the release of version 4.0, introducing sophisticated mechanisms to establish persistence through vulnerable network services. The latest variant leverages open Remote Desktop Protocol (RDP) and Server Message Block (SMB) services as entry points, enabling threat actors to maintain long-term access to compromised networks while deploying advanced evasion techniques that […]

The post HardBit 4.0 Ransomware Abuses Unsecured RDP and SMB for Access Persistence appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty

·

A law enforcement operation coordinated by INTERPOL has led to the recovery of $3 million and the arrest of 574 suspects by authorities from 19 countries, amidst a continued crackdown on cybercrime networks in Africa. The coordinated effort, named Operation Sentinel, took place between October 27 and November 27, 2025, and mainly focused on business email compromise (BEC), digital extortion, and

¶¶¶¶¶

Passwd: A walkthrough of the Google Workspace Password Manager

·

Passwd is designed specifically for organizations operating within Google Workspace. Rather than competing as a general consumer password manager, its purpose is narrow, and business-focused: secure credential storage, controlled sharing, and seamless Workspace integration. The platform emphasizes practicality over feature overload, aiming to provide a reliable system for teams that already rely

¶¶¶¶¶

Indian Income Tax–Lure Campaign Deploying Multi-Stage Malware Against Businesses

·

cyber security, Cyber Security News, Malware

Tax-themed phishing campaigns have intensified in recent months, capitalizing on the heightened awareness surrounding India’s Income Tax Return (ITR) filing season. Public discussions about refund timelines and compliance deadlines create an ideal backdrop for attackers to craft credible lures. Recent analysis of emails impersonating the Indian Income Tax Department reveals a sophisticated operation far more […]

The post Indian Income Tax–Lure Campaign Deploying Multi-Stage Malware Against Businesses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

Pirate Group Anna’s Archive Copies 256M Spotify Songs in Data Scrape

·

Annas Archive, Archive, Data Scrape, Leaks, music, Piracy & Intellectual Property, Privacy, Security, Spotify, Streaming, Torrent, Web Scraping

Spotify has confirmed a massive unauthorised data scrape involving 256 million track records and 86 million audio files. Learn how “Anna’s Archive” bypassed security, and why experts warn against downloading the leaked files.

¶¶¶¶¶