Cyber CrimeNorthflank breach exposes AI key theft risk
Cloud platform Northflank told customers to rotate all secrets after a breach led to unauthorized use of AI API keys stored on its systems.
> Search
30 results for “us”
Cyber Crime
Cyber CrimeSyrian Hacker Sentenced After 12 Years
Ahmad Umar Agha, tied to the Syrian Electronic Army, was sentenced to 42 months in the US more than 12 years after he was first charged.
Cyber Crimen0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
Cyber CrimeChina-Linked Chain Roots 25 PAN Firewalls
A suspected Chinese state actor chained PHP2Shell with a Linux kernel flaw to gain root on 25 Palo Alto servers, including a US government domain.
Cyber CrimeJoint Alert Exposes Integrity Tech TTPs
US, UK and allies issue a joint advisory detailing the tools and techniques of sanctioned Chinese firm Integrity Technology Group.
Tech NewsUgreen's Ultra NAS Doubles Down on Headroom
Ugreen's NASync DXP8800 Ultra brings a Core 7 150U and 96GB ceiling, but gains over the Plus are modest for the price.
Tech NewsStarlink's India Launch Caught in Crossfire
Elon Musk accuses Mukesh Ambani of blocking Starlink as India's government denies favoritism.
Cyber CrimeFBI Arrests Another ShinyHunters Suspect
The FBI has arrested a second suspected ShinyHunters member in days, as the agency escalates pressure on the gang behind its breach.
Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
SecurityLightwell Uncovers 400+ Java Library Flaws
IBM and Red Hat's Lightwell project has identified over 400 novel vulnerabilities in Java libraries, launching a clearinghouse service for customers to submit code for review.
Tech NewsIntel Starts Microsoft's Driver Quality Reset
Intel's new Wi-Fi driver is the first Windows 11 release to follow Microsoft's Driver Quality Initiative, with Arc GPUs next.
AI & MLOpenAI flags three model misbehavior cases
OpenAI's October 2 misalignment reports detail a model weighing its own shutdown, tool misuse, and a training-run data grab.
Cyber CrimeYMCO Leader Pleads Guilty in Mule Case
A dual citizen admits to running a 15,000-mule money laundering network that moved millions for cybercriminals over nearly two decades.
AI & MLAI Security Starts With Outcomes, Not Tools
A practitioner argues that AI-native security programs should begin by identifying critical business outcomes and the constraints that prevent consistent delivery.
AI & MLAI Training Gap Tests Governance
ISACA research shows 32% of digital trust professionals say their organizations fail to address AI risks, as adoption climbs.
Cyber CrimeFBI Seizes Domains Tied to Chinese Hacking Tools
The FBI has seized seven domains linked to Chinese state-sponsored hackers, disrupting two key platforms used in attacks on critical infrastructure.
Cyber CrimeJapan's Web Data Leaks Surge as APIs Abused
JPCERT/CC reports a sharp rise in personal data leaks at Japanese organizations, tied to mobile API abuse and a Metabase flaw.
SecurityLet's Encrypt to shorten cert lifetimes in 2027
Let's Encrypt will cut certificate lifetimes from 90 to 64 days starting February 10, 2027, pushing administrators toward automated renewal.
SecurityNvidia Bug Leaves GPU Metrics Exposed
Researchers found thousands of GPU servers leaking monitoring data online, with some vulnerable to a high-severity flaw.
Cyber CrimeFake Firefox Wallets Target Recovery Phrases
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
Cyber CrimeUS Puts $10M Bounty on Hafnium Hacker
The State Department is offering up to $10 million for information on Zhang Yu, accused of COVID-19 research theft and the Hafnium Exchange campaign.
Cyber CrimeUAC-0099 Turns MATCHBOIL Into Long-Term Tool
ESET tracked MATCHBOIL versions from April 2024 to April 2026, linking the downloader to Russia-aligned UAC-0099 operating in Ukraine.
Cyber CrimeAI Agent Tooling Used in Bank Hacks
CrowdStrike attributes a data theft campaign against South Korean financial firms to a Chinese-speaking actor who paired an agentic pentesting tool with multiple LLMs.
Tech NewsWindows 11 Search Gets a Long-Awaited Overhaul
Microsoft is rebuilding Windows 11 search on WinUI 3 for speed and lower RAM use, adding inline previews and 'actions' to change settings right from the search box.
AI & MLAWS Sandbox Targets Rogue AI Agents
AWS's new Strands Box uses OS isolation and custom policies to curb AI agent behavior, but security experts warn controls have gaps.
Cyber CrimeShinyHunters Suspect Tied to Boeing Unit Extortion
A detained Jordanian teen accused of leading ShinyHunters allegedly extorted a former Boeing unit before his arrest, sources say.
Cyber CrimeMALFEX npm Campaign Hidden in Eight Packages
CloudSEK and Checkmarx say a lone actor shipped 12 npm packages since 2023, eight flagged malicious and downloaded 40,767 times.
AI & MLAWS sandbox aims to tame rogue AI agents
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
SecurityNew SonicWall Flaw Hits VPN Gateways
SonicWall issued hotfixes for a maximum-severity SSRF bug in SMA1000 appliances, urging customers to upgrade before attackers take note.
SecurityHadrian's Series B Fuels AI Pentesting Push
Hadrian raises $40 million to expand its AI offensive security platform and challenge the slow pace of manual pentesting.