CYBERSECURITY

Russian State-Sponsored Hackers Targeting Critical Infrastructure Routers

A joint cybersecurity advisory from the United States and 12 allied nations was released this week warning critical infrastructure operators that Russian state-sponsored hackers from Federal Security Service (FSB) Center 16 are actively exploiting poorly configured and vulnerable networking devices to break into systems.

The threat group, also known as Berserk Bear, Energetic Bear, Crouching Yeti, Dragonfly, Ghost Blizzard and Static Tundra, has been scanning the internet for routers with default or weak passwords, or unpatched old Cisco vulnerabilities. Read more

ENFORCEMENT + LITIGATION

Update on New Jersey’s New Data Broker Rule

Last week, we wrote about the newly enacted New Jersey data broker law. On July 10, 2026, the New Jersey Attorney General’s Division of Consumer Affairs published an alert clarifying that covered data brokers and data collectors will not need to register or pay registration fees until the Division launches the required public registry, which is expected in spring 2027. The first registration period is anticipated to run from April 1, 2027, through June 30, 2027, with additional guidance to come before then. The alert also notes that the Division plans to issue further guidance on other aspects of the law, including its restrictions on the sale or licensing of sensitive data. Read more

FCC and 49 State Attorneys General Dial Up Attention on Robocall Compliance

On July 8, 2026, the Federal Communications Commission (FCC) Enforcement Bureau entered into a consent decree with Voximplant, Inc., a voice and video call platform, to resolve an investigation into whether the company failed to comply with the FCC’s robocall mitigation rules. The FCC’s robocall mitigation framework is designed to make the voice calling ecosystem more transparent and help law enforcement identify and stop illegal robocall traffic more efficiently. Read more

PRIVACY TIP #499

Scammers Using Big Brand Logos to Launch Fake Recruiting Schemes

Threat actors are spoofing big brand logos in recruiting scams to dupe individuals into believing they are working with real companies and to divulge their Google credentials.

The scam was first identified by a Team Cymru researcher, who discovered that threat actors were impersonating recruiters from big brands to target marketing professionals. The fraudulent emails were highly personalized, addressing recipients by name, referencing their professional field, and demonstrating that the threat actors conducted research on their backgrounds before making contact.

Read this week's Privacy Tip to learn about the fake recruiting schemes, and how you can protect yourself from these convincing job-related scams. Read more