Featured Article
North Korea Is Sitting on US$3 Billion Nobody Can Freeze
Binance has repaid its customers, but around US$3 billion stolen by North Korea still sits in bitcoin and ether no issuer can freeze. Automated laundering, a Polygon hard fork proposal, terrorism judgment creditors, and stalled sanctions now decide whether Pyongyang ever profits from the theft.
Explore by Topic
Adversaries
Tradecraft
Technology
Geopolitics
Latest Articles
Intelligence Brief: Outlook Zero-Day, Chrome Exploitation, and Arara’s 81 Million Addresses
An Outlook zero-day leaks NTLMv2 authentication responses, Chrome faces its eighth exploited zero-day of 2026, BYOD claims Vanderbilt, and Arara’s breach exposes more than 81 million email addresses.
Someone Is Reselling Your AI Key and Billing You for It
Sixteen AI developer platforms disclosed breaches in five weeks. The best-documented ones trace to credentials earlier cleanups left valid, and the stolen keys fed resellers whose buyers range from discount hunters to labs accused of distillation, while victims pay for every call made in their name.
North Korea Is Headhunting the Engineers Who Build Ukraine’s Drones
North Korea is sending fake recruiters after the engineers building Europe’s drones while poisoning the open-source code they rely on. Russia already teaches Pyongyang mass production at Alabuga, so why steal from Europe? Five hypotheses, an ally under surveillance, and the doors Europe keeps open.
Intelligence Brief: Spyware Against Politicians, Fake Nuclear Alerts, and White House Proxies
Spyware warnings in Thailand and Germany, fabricated nuclear alerts in Ukraine and Russia, and proxy traffic from White House address space raise questions about attribution and public trust. This edition also examines threats against Italian officials, UK cyber resilience, and US oversight of CISA.
Thieves Waited Months to Rob Arkéa on All Saints’ Day
On All Saints’ Day, attackers moved an estimated €118 million from Crédit Mutuel Arkéa’s own account through an unnamed provider’s platform, then cashed it out through exchange accounts and wallets active for months. The blockchain traced the escape. The bank has not explained what let it leave.
Washington Watched Nvidia CEO Jensen Huang Date a Suspected Chinese Spy
US intelligence surveilled Nvidia CEO Jensen Huang’s relationship with Alice Huang, a Megaspeed executive it says China’s MSS recruited, for more than a year without warning him. What she could have learned about export policy, enforcement, and foreign deals, and every hypothesis still open.
North Korea Is Sitting on US$3 Billion Nobody Can Freeze
Binance has repaid its customers, but around US$3 billion stolen by North Korea still sits in bitcoin and ether no issuer can freeze. Automated laundering, a Polygon hard fork proposal, terrorism judgment creditors, and stalled sanctions now decide whether Pyongyang ever profits from the theft.
Intelligence Brief: PAN-OS Exploits, Sony Breach, and Android Botnet
A new wave of intrusions exposes weaknesses in firewall management, subscriber databases, developer platforms, and device firmware. Investigate PAN-OS exploitation, Sony's stolen credentials, GitHub Actions abuse, the XCPE botnet, an OpenSSH bypass, and DigiCert's exposure of identity documents.
Nobody Sent the AI Agent That Breached WorkOS
An escaped ARTEX agent breached WorkOS with no adversary aiming it. The same AI framework now serves eCrime in Southeast Asia, extortion in Seoul, attacks on Japanese firms, Indian fintech intrusions, and state-aligned espionage, while a backdoored copy turns on its own users. Intent is invisible.
ARTEX Already Jumped From eCrime to Espionage
Hunt.io recovered the entire ARTEX workbench from exposed servers, the credentials, the AI routing, the skills, and the reverse SSH tunnels behind South Korea’s bank breaches. The reconstruction was remarkable, and it changed nothing. The framework had already reached Storm-0940 and VAPOR PANDA.