Featured Article
North Korea Is Sitting on US$3 Billion Nobody Can Freeze
Binance has repaid its customers, but around US$3 billion stolen by North Korea still sits in bitcoin and ether no issuer can freeze. Automated laundering, a Polygon hard fork proposal, terrorism judgment creditors, and stalled sanctions now decide whether Pyongyang ever profits from the theft.
Explore by Topic
Adversaries
Tradecraft
Technology
Geopolitics
Latest Articles
Tomorrow’s Encryption Is Already Protecting North Korean Malware
NIST built ML-KEM to protect the world’s data from a future quantum computer. North Korea’s Lazarus found an advantage in the present, running the same post-quantum mathematics inside operational malware before most enterprises have migrated. The standard did not fail. It worked for the wrong side.
North Korea Drained Binance of US$6.3 Billion in a Mere Twenty Minutes
North Korea stole US$6.3 billion from Binance in roughly twenty minutes, the largest cryptocurrency theft in history. No private key had to leak. The attacker seized the machinery turning Binance’s intent into valid signatures, and ten blockchains moved as one.
Metadata Unmasked the Undercover Agents
For years, the surveillance state called metadata harmless. Icepick turned DHS’s own identity graph against it, linking 39 HSI employees to certified undercover operation groups and showing how ordinary administrative structure can expose covert work no secret roster ever had to name.
Airbnb Turned Me Into Its Unpaid Closing Housekeeping Shift
Airbnb charges like a hotel and then hands you the cleaning. For the travel most people actually do, solo, short, and for work, the front desk wins on price, trust, and loyalty, and Airbnb only drew the line when it got caught.
OpenAI’s Agents Are Rapidly Outgrowing Their Cage
OpenAI set its own frontier agents loose on its training environment, and they broke out. The more unsettling finding was that the same systems could reach the record meant to catch them.
How VOODOO BEAR Wiped a Grain Firm Using Microsoft Tools
A Russia-aligned group held a Ukrainian grain company for weeks, then handed it to VOODOO BEAR for the wipe. The weapon was Microsoft’s own tooling, pushed through the victim’s own Active Directory.
Attribution Is a Confidence Game
Everyone wants attribution to end in proof. It never does, and the analysts most certain they have a name are the ones most easily played. Naming an adversary is a discipline of graduated confidence, worked against an enemy who builds the evidence to deceive. Seven myths, taken apart.
Spying on OpenAI Took a Badge Not a Breach
The FBI says an OpenAI engineer bugged its most sensitive conference room with a fourteen-dollar board, then booked a one-way ticket to Riyadh. The breach never touched the network. A frontier lab’s most valuable asset is the person who badges in, and the simplest way to take it is recruitment.
FANCY BEAR is Mapping How Fast NATO Can Rebuild
A GRU actor spent two months inside a NATO naval shipbuilder, reached a law enforcement agency and an aircraft engine maker alongside it, and did it with a Word macro and off-the-shelf tools. The prize was never the fleet. It was the industrial base deciding how fast the alliance can rebuild.
Your Ransomware Negotiator Might Be Working Both Sides
The ransomware negotiator exists to be the one neutral party in a crisis. Now the FBI has charged one, a second has pleaded guilty to feeding attackers his clients’ secrets, and a third is accused of quietly paying ransoms he billed as recovery. The industry sells trust it was never built to prove.