Top stories.
- President Trump delays DNI confirmation hearings.
- Shiny Hunters leaks data allegedly stolen from Madison Square Garden.
- New Android malware targets over 200 banking apps.
President Trump delays DNI confirmation hearings.
President Trump abruptly cancelled today's confirmation hearings for Jay Clayton's nomination as Director of National Intelligence (DNI), using the delay as leverage to push for the confirmation of Jamie McDonald to fill Clayton's current post as US attorney for the Southern District of New York, the Washington Post reports. The president also tied the renewal of FISA Section 702 to the passage of the administration's voter ID bill.
POLITICO notes that the delay "paves the way for close political ally Bill Pulte to move into the acting DNI role Friday, something members of both parties had been hoping to forestall by quickly confirming Clayton this week."
Shiny Hunters leaks data allegedly stolen from Madison Square Garden.
The ShinyHunters extortion group has published data allegedly stolen from Madison Square Garden (MSG), including information on Knicks players and executives, celebrities, and MSG executives, 404 Media reports. The hackers claim to have stolen 45 GB containing over 26 million customer and corporate records. ShinyHunters says the breach occurred on June 5th, and the threat actor had requested a ransom payment from MSG by June 15th.
404 notes that the hackers chose to leak the data just days after the Knicks' NBA championship win, increasing public attention on the incident.
New Android malware targets over 200 banking apps.
Zimperium has published a report on a new Android banking Trojan dubbed "Rokarolla" that targets 217 cryptocurrency and banking applications. The malware spreads via malicious websites, where it impersonates popular apps like TikTok and Google Chrome.
Zimperium notes, "To facilitate undetected financial fraud, Rokarolla employs a sophisticated suite of 137 commands that grant it extensive administrative control over an infected device. Its malicious capabilities include harvesting lock screen credentials, exfiltrating sensitive contact lists and SMS data, and utilizing keyloggers to continuously record user input. Furthermore, the trojan actively conceals its operations and disrupts user intervention by blocking incoming calls, deploying fraudulent screen overlays, suppressing device audio, and deactivating Google Play Protect."
Business news: Ent emerges from stealth with $100 million.
San Francisco-based endpoint security and AI governance startup Ent has emerged from stealth with $100 million in seed funding led by Decibel, with participation from Sequoia, Crosspoint Capital Partners, Craft Ventures, Shield Capital, Felicis, and In-Q-Tel. The company says the funding "will support continued hiring across engineering and go-to-market, while accelerating Ent’s roadmap across AI governance, threat prevention, security integrations, and multimodal endpoint intelligence."
Read more in the Business Briefing at 4pm ET.
