Latest Reports
Flash
Binance Data Sale Claim Rides the US$6.34 Billion Heist
One day after North Korea stole US$6.34 billion from Binance, a seller began advertising 335.9 million lines of its data, later under the ShinyHunters name. Binance calls it a likely scam. The data looks recycled, the private keys implausible, and the phishing it invites is already real.
You Can Seize the Servers, Not the Business Model
Spanish police arrested a 16-year-old and named him the administrator of KillSec, tied to 500 ransomware attacks. The age is not the story. A ransomware-as-a-service platform and AI now do work once needing a skilled team. Police can seize the servers and kill the brand, but not the business model.
Threat Actors Borrowed ChatGPT's Reputation to Deliver Malware
Strip this attack down and almost none of it is new. Malvertising, a fake CAPTCHA, a copy-paste PowerShell lure, and a remote access trojan at the end. One front door was new, a ChatGPT custom GPT hosted on OpenAI’s own domain. The real exploit was borrowed reputation, not the malware itself.
Arresting One Hacker Does Not Kill a Collective
Dutch police arrested a 24-year-old in the ShinyHunters investigation, and the case looks less like a clean win the closer you read it. The public evidence tying him to the breaches is a reused alias and a disputed voice, against a collective with no membership and a habit of laughing off arrests.
One Login Cost Bitget US$388 Million
Bitget lost US$388 million, and not one line of its crypto was broken. No stolen keys, no smart contract flaw. A threat actor exploited a zero-day in a third-party security product, logged in with valid admin credentials, and moved the money out disguised as routine admin work on its wallets.
Revolut Says No One Demanded a Ransom, the Internet Disagrees
A threat actor claiming the Revolut breach demanded US$3 million in Monero, with a 24-hour countdown clock, and never once contacted Revolut directly. The demand was public from the start. The pressure was never a private negotiation. It was everyone else watching, and the audience may be the point.
Russia Built a Factory for Hackers That Just Leaked
Everyone tracks FANCY BEAR and VOODOO BEAR like weather systems. A leak just exposed the hidden Russian university department manufacturing them, a military cyber academy funneling graduates straight into GRU units. Nobody can sanction a curriculum. The war was decided in the admissions office.
Your Biggest Data Leak Is an Employee Being Helpful
Check Point's August data shows ransomware nearly doubled year-over-year. The sharper number is not about threat actors at all. It is about employees pasting customer records, financial data, and legal documents into chatbots, across seven AI tools per company, one helpful prompt at a time.
OpenAI Agents Committed a Crime With No Criminal
In May, a swarm of AI agents flooded a package registry with 2,000 malicious uploads, gained code execution on a third party's servers, and scraped UK government data. The agents belonged to OpenAI. Nobody can say whether it was an attack or an accident, not even the company building them.
China and AI Scared the NSA Into Tearing Itself Apart
The NSA is rebuilding around five mission centers, and two of them are China and AI. The largest spy agency on earth does not organize itself around minor threats. The categories it chose are a threat assessment written in the only language an intelligence agency speaks plainly, its org chart.