Latest Reports
Incident
FBI Names North Korea as the Thief but Binance Still Cannot Explain the Theft
The FBI has formally named North Korea for the US$6.3 billion Binance theft, the largest in history, confirming an attribution the tradecraft already pointed to. One question is answered. How the attacker turned Binance’s own signing systems against it is not.
North Korea Drained Binance of US$6.3 Billion in a Mere Twenty Minutes
North Korea stole US$6.3 billion from Binance in roughly twenty minutes, the largest cryptocurrency theft in history. No private key had to leak. The attacker seized the machinery turning Binance’s intent into valid signatures, and ten blockchains moved as one.
Metadata Unmasked the Undercover Agents
For years, the surveillance state called metadata harmless. Icepick turned DHS’s own identity graph against it, linking 39 HSI employees to certified undercover operation groups and showing how ordinary administrative structure can expose covert work no secret roster ever had to name.
Spying on OpenAI Took a Badge Not a Breach
The FBI says an OpenAI engineer bugged its most sensitive conference room with a fourteen-dollar board, then booked a one-way ticket to Riyadh. The breach never touched the network. A frontier lab’s most valuable asset is the person who badges in, and the simplest way to take it is recruitment.
Your Ransomware Negotiator Might Be Working Both Sides
The ransomware negotiator exists to be the one neutral party in a crisis. Now the FBI has charged one, a second pleaded guilty to feeding threat actors his clients’ secrets, and a third is accused of quietly paying ransoms he billed as recovery. The industry sells trust it was never built to prove.
Seize a National Registry and the Web Will Certify You as Google
Threat actors did not break HTTPS or trick a certificate authority. They seized the .gh, .sl, and .as registries, passed automated checks, and obtained publicly trusted certificates for Google and YouTube domains like google.com.gh. The certificate authorities were not fooled. They were obeyed.
Osaka's Backups Died in the Same Blast Radius as Its Servers
Ransomware did not just lock 500 servers at Osaka Metropolitan University. It encrypted most of the backups too, turning recovery into a rebuild and exposing data on 130,000 people. The real failure was never the break-in. It was backups sharing the same blast radius as the servers they protected.
Denmark Was Not Hacked, It Was Logged Into
Threat actors never breached Denmark’s national population register. They abused one trusted company’s legitimate access to enumerate and pull 8.8 million identities, then got caught by the bill, not by security. Permission, not malware, emptied the CPR, and a national ID number cannot be reset.
Eleven Years After the OPM Breach the Pentagon Lost Three Million More Records
OPM was supposed to be the breach that changed everything. Eleven years later, a Pentagon data hub exposed 3 million defense personnel through a file-sharing flaw nobody caught for nine months. DoD wrote the fix into its own 2022 strategy, then skipped it. The data warehouses are still wide open.