UN launches first global cybercrime treaty.

Summary

By the CyberWire staff

At a glance.

UN launches first global cybercrime treaty.
Democrats' job portal left security clearance data exposed.
Data Leak exposes over 180 million email addresses and passwords.

UN launches a new global treaty aimed at combating cybercrime.

The United Nations (UN) debuted the world's first global treaty focused on combating cybercrime on Saturday. 72 nations signed the new Convention.

However, groups like the Electronic Frontier Foundation, Human Rights Watch, and Privacy International have expressed their concerns with the treaty, arguing it grants overly-broad surveillance powers without creating sufficient safeguards. Alongside these groups, Cisco voiced its concerns that the Convention risks eroding the rule of law.

The Convention will not take effect until countries ratify it, and the UN has not published the full list of signatories.

Control what runs in your environment. Reduce your attack surface.

ThreatLocker helps organizations reduce risk by allowing trusted applications to run while limiting their access to only the resources they need. It’s a straightforward, default deny approach that gives you more control and visibility—without slowing down operations. Explore how ThreatLocker can help simplify your security strategy.

Security Clearance exposed on House Democrats' job portal.

DomeWatch, which is a website managed by House Democrats, was exposed through an unsecured database. This exposure leaked the personal details of over 450 individuals holding top secret security clearances.

The database contained data on roughly 7,000 job applicants, including names, contact details, military service histories, clearance levels, and political affiliations.

The exposure was discovered in late September by an independent security researcher and secured within hours. House officials say an outside vendor was responsible and is conducting a full investigation.

New data leak exposes 183 million email addresses and passwords.

Security researcher Troy Hunt found a new data leak, which he attributes to threat intelligence firm Synthient. The data was roughly 3.5 terabytes and 23 billion rows and included both stolen Gmail logins and website credentials.

Hunt stated that 8% of the listed entries were new, adding 16 million previously unseen addresses with evidence that some of these records were tied to affected users. Experts are urging password changes and avoiding reusing passwords across multiple accounts.

Notes.

Today's issue includes events affecting , and countries of the United Nations the United States.

Attacks, Threats, and Vulnerabilities

Gloversville hit by ransomware attack (WNYT.com NewsChannel 13) The city of Gloversville’s computer system was hit by a ransomware attack, which compromised the personal information of employees, past and present. The attack was discovered by the finance commissioner back in March, the city announced on Saturday.

Year-Old WordPress Plugin Flaws Exploited to Hack Websites (Security Week) Roughly 9 million exploit attempts were observed this month as mass exploitation of the critical vulnerabilities recommenced.

Hackers steal Discord accounts with RedTiger-based infostealer (BleepingComputer) Attackers are using the open-source red-team tool RedTiger to build an infostealer that collects Discord account data and payment information.

Trends

Ex-CISA chief says AI could mean the end of cybersecurity (The Register) Jen Easterly says most breaches stem from bad software, and smarter tech could finally clean it up.

Marketplace

A $60 Mod to Meta’s Ray-Bans Disables Its Privacy-Protecting Recording Light (404 Media) Meta’s Ray-Ban glasses usually include an LED that lights up when the user is recording other people. One hobbyist is charging a small fee to disable that light, and has a growing list of customers around the country.

Litigation, Investigation, and Law Enforcement

Yale New Haven Health Will Pay $18M to Settle Hack Lawsuit (GovInfo Security) Yale New Haven Health System, the largest healthcare organization in Connecticut, has agreed to pay $18 million to settle proposed class action litigation involving a March hacking incident affecting nearly 5.6 million people.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

ISC2 Security Congress 2025 (Nashville + Virtual, Tennessee, USA, Oct 29 - 31, 2025) Join thousands of cybersecurity experts at ISC2 Security Congress 2025 and help lead the future of our connected world. Gain the insights you need to stay ahead of the evolving digital landscape. From innovative software to new security strategies, ISC2 Security Congress 2025 is designed to ensure you can navigate tomorrow’s threats.

Cyber Innovation Day 2025 | Datatribe (Washington, DC, USA, Nov 4, 2025) If you’re raising a seed or pre-seed round and are building the next category-defining company, we want to hear from you! The DataTribe Challenge is the headline event of the afternoon at Cyber Innovation Day 2025, where five finalists take the stage after weeks of hands-on coaching from seasoned startup operators and investors. These five finalists—along with additional promising startups—will exhibit in the Cyber Innovation Expo Hall, gaining high-impact exposure to top investors, cybersecurity leaders, and strategic partners.

CYBERWARCON (Virtual and Arlington, Virginia, USA, Nov 19, 2025) CYBERWARCON is a one-day conference in Arlington, VA focused on the specter of destruction, disruption, and malicious influence on our society through cyber capabilities. CYBERWARCON is not a hacker conference, or an ICS conference, or an international policy conference. The central purpose of this conference is to identify and explore threats. Participants and attendees come from a spectrum of backgrounds, including the military and government, academia, the media, and the private sector.

AWS re:Invent 2025 (Las Vegas, Nevada, USA, Dec 1 - 5, 2025) AWS re:Invent is a learning conference hosted by AWS for the global cloud computing community. The in-person event features keynote announcements, training and certification opportunities, access to more than 2,000 technical sessions, the Expo, after-hours events, and so much more.

TRUSTECH 2025 (Paris, France, Dec 2 - 4, 2025) This international event is the go-to place for all things payments, digital identity, cybersecurity, and fintech. With over 200 exhibitors, 100+ speakers, innovation awards, networking opportunities, and exclusive content, it’s the perfect place to discover what’s next in trusted technologies.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 10.27.25