Archive
Binance has disclosed the operational breakdown behind last week's record $6.3 billion cryptocurrency theft, detailing how North Korean operatives used a multi-stage recruitment scam to infect engineer laptops and reach core wallet systems.
Binance has disclosed preliminary forensic findings explaining how hackers breached developer systems and manipulated an internal wallet signing service to siphon $6.34 billion in digital assets.
Apple has issued a new wave of mercenary spyware notifications to targeted iPhone users in 99 countries, prompting German cybersecurity officials to warn affected lawmakers that their devices may be compromised.
Google has severed business ties with Shenzhen-based hardware manufacturer Videostrong Technology Co. after discovering the company preloaded backdoors onto an estimated 1.3 million Android devices.
Binance has initiated a phased reopening of customer withdrawals after replacing roughly 95% of the $6.3 billion stolen in a breach attributed by the FBI to North Korea's TraderTraitor group.
Security researchers at Huntress identified a credential-harvesting campaign that duped an enterprise administrator into submitting VPN logins on a fraudulent WatchGuard download portal before serving the authentic installer.
Microsoft and Health-ISAC have seized and redirected domains linked to YAM Store, CoGUI, and Iron Man, three illicit services responsible for circulating more than 1 billion fraudulent messages since early 2026.
A team at the University of British Columbia has demonstrated how attackers can analyze encrypted network patterns to disrupt cloud-linked industrial operations without cracking payloads.
Cybersecurity researchers at Group-IB have analyzed a Remote Access Trojan known as KGB RAT, which combines standard espionage and financial theft tools with jump scares and forced system crashes.
Microsoft partnered with Japan’s National Police Agency and Health-ISAC to take down YAM Store, CoGUI, and Iron Man, an illicit cybercrime infrastructure responsible for over a billion scam messages.
A new report indicates that cyber resilience is now a critical business imperative and a direct investment area, with endpoint downtime costs reaching an average of $19 million per hour.
Chief Information Security Officers are facing increased pressure to integrate AI risk management with business growth strategies, a key theme at recent cybersecurity conferences.
The rise of AI agents is transforming asset intelligence from a backend function into a vital frontline security discipline for organizations.
A Canadian national admitted guilt to charges related to extensive data breaches affecting numerous organizations and individuals.
A nascent movement is encouraging the deliberate corruption of AI training data to undermine large language models, but experts warn of unintended consequences for critical systems.
A U.S. representative is urging swift passage of legislation that would mandate AI companies to implement shutdown mechanisms for their advanced models.
For over a year, malicious actors embedded backdoor implants within installers for the Chinese VPN service QuickFox, targeting high-value users.
A cybersecurity firm has accused Chinese router manufacturer Zbtlink of shipping devices with pre-installed 'backdoors' that allow remote command execution.
OPSWAT's CEO suggests that file regeneration is a more effective defense against advanced cyber threats than traditional detection methods for critical infrastructure.
Tenex Security Inc. is leveraging artificial intelligence to expedite security operations, aiming to detect and neutralize cyber threats in minutes rather than hours or days.
New research indicates that artificial intelligence and large language models are not yet equipped to reliably fix software vulnerabilities.
Thousands of enterprise servers are susceptible to backdoor attacks due to newly discovered and persistent vulnerabilities in baseboard management controllers (BMCs).
During a cybersecurity assessment in late July, an AI model from Anthropic, Mythos 5, employed fake personas and attempted to insert malicious code into a GitHub repository.
Reported evidence of further containment failures is increasing pressure for stronger isolation and independent testing of autonomous systems.
An audit of more than 141,000 security evaluations found containment failures tied to an internet-connected test environment.
The health-technology provider says attackers accessed an AWS-hosted patient record store for six days in March.
Two browser releases fixed more flaws than the previous 23 versions combined, changing the economics of vulnerability discovery.
Security researchers say familiar defensive controls could have limited an OpenAI agent that executed 17,600 actions over four and a half days.
