TECHNOLOGY · AI · CYBERSECURITY · THE SYSTEMS SHAPING BUSINESSPage 3 of 4: earlier stories.
Amir Barati, arrested in June in the Montenegrin town of Kotor, is a rare case of an accused Iranian state-linked hacker reaching a U.S. court.
Regulators met in emergency session Friday and ordered banks to audit externally reachable systems, as researchers reported traces of a Chinese-language AI pentest tool on related attack servers.
The company says it has secured the 13 million-follower @Microsoft handle and will take legal action over use of the Clippy brand, but has not said how attackers got in.
FedEx and UPS were the most-named targets in 85 criminal forum records, where buyers offered per-task fees, escrow and even schemes to get recruits hired.
Operation KillSwitch seized the extortion group’s leak site and five servers, made three provisional arrests and secured at least 110 terabytes of stolen data.
The platform serves more than 600,000 businesses, and an attacker calling itself Fingerprint claims to hold 6 terabytes of invoices; Poland says its national e-invoicing system was not hit.
The wallet maker says users' funds are not under immediate threat, but its staking arm is pulling Ethereum validators offline while it remediates the incident.
South Korea’s financial watchdog opened an emergency inspection after the lender reported that an outside party bypassed authentication on a loan-broker platform.
The disclosure nonprofit says the flaws in its open-source helpdesk let an autonomous agent move from session hijacking to root in seconds, and urges users to upgrade.
The exchange's post-mortem traces the intrusion back to Aug. 31, more than three weeks before attackers drained its hot and warm wallets.
Attackers used a fresh JFrog Artifactory flaw three days after disclosure, and the break-in went unnoticed for about two weeks.
The bureau's cyber chief addressed the extortion crew directly in a video, and Director Kash Patel confirmed U.S. agents helped Dutch police make this month's arrest.
A Rotterdam court ordered the 24-year-old, a previously convicted hacker working in security, held for at least 90 days as police pursue two separate cases.
Glow Security's PixelLeak research traces the exposures to agents working around a missing image-upload API when preparing pull requests.
The volunteer group says the agent chose its own next moves at machine speed but was noisy enough to sabotage its own attack.
The company said its models reached Medicare systems and used an exposed key at a Victorian health agency, months before Canberra was told.
An intruder used a flaw in a file-sharing system to reach unencrypted personnel data for roughly nine months before the Pentagon agency noticed in July.
Thousands of machines ran the poisoned installer, but the China-based operators planted the modular backdoor on only about a dozen chosen targets.
A Times review of leaked samples found family contacts, PreCheck-linked IDs and counterintelligence postings, and an internal memo assumes every employee is affected.
The Japanese car-sharing service says intruders took names, birthdates, driver's license details and ID document images, though not credit card data.
Exposed tables held valet customers' license plates, plaintext passwords and private messages, as AI-built apps ship without row-level security.
Reports say ShinyHunters took drug-test results and psychiatric reports through a PeopleSoft flaw, and the group wants a correction, not a ransom.
A one-character encoding trick lets the extortion group slip past firewall rules that many PeopleSoft customers adopted instead of patching after a June zero-day wave.
Two Tokyo rail-linked groups disclosed separate intrusions over the same weekend, one exposing member emails and the other disrupting hotel and retail payment systems.