Security

A group calling itself 'iamnotavillain' claimed responsibility for obtaining personal data on hundreds of Revolut customers through a compromised Italian government email account, demanding 6,000 Monero before the deadli...

Nostra's lending market on Starknet fell victim to an oracle attack that allowed an attacker to artificially inflate NSTR collateral value and borrow approximately $3.5 million across multiple assets.

A vulnerability introduced during a June 2023 code refactor in the Radix Engine went undetected for over three years before an attacker exploited it on August 31, draining approximately $1.3 million in stablecoins, crypt...

A targeted cyberattack on Haruko, a crypto technology provider to institutions, compromised 15 clients' exchange API details and trading data. Some smaller hedge funds with weaker security controls may have lost funds.

A three-person team at Hacktron AI exploited two flaws to hijack an OpenAI employee account and reach the company's private code repository, earning a $6,500 bounty. The researchers used Anthropic's Claude to develop the...

A former KeyBank employee tasked with preventing financial crime has been sentenced to a decade in prison for stealing over $1 million from elderly customers aged 90 to 103 across multiple states.

State-linked hackers from North Korea and Iran are increasingly using public blockchains to store malware instructions, exploiting the permanence of decentralized networks to evade traditional security takedowns. The shi...

A team affiliated with security startup Hacktron AI chained three vulnerabilities to access OpenAI's private code repository in under 72 hours, collecting a $6,500 bounty. The exploit development work was aided by Anthro...

Security researchers have identified a new Android malware strain called RatHat that leverages artificial intelligence to hijack infected phones, steal banking logins, and intercept authentication codes.

Police in the UAE and Sweden have dismantled an international money laundering operation that moved approximately $7.1 million in criminal proceeds over ten months using cryptocurrency to conceal funds. The arrests inclu...

Input Output Group alerted users to avoid its compromised YouTube channel after scammers livestreamed an AI-manipulated video of Cardano founder Charles Hoskinson promoting a fraudulent cryptocurrency giveaway scheme.

Two Richmond residents have been sentenced to prison for a coordinated scheme involving stolen postal keys, fraudulent checks, and unauthorized card transactions that netted $84,000 from victims between May 2023 and Apri...

Charles Hoskinson alerted the community that Input Output Global's YouTube channel has been hijacked, urging users to avoid clicking links or trusting new videos on the platform.

S&P Global has agreed to acquire OpenZeppelin, the smart contract security company, in a deal that brings crypto infrastructure under the oversight of a major financial data provider. OpenZeppelin will operate as an inde...

HP Wolf Security discovered a campaign where a counterfeit AI trading assistant delivered malware that replaced seven popular browser crypto wallet extensions with fraudulent versions designed to capture login credential...

Nostra halted its money market on Thursday following an oracle price manipulation that allowed an account to borrow approximately $3.5 million in multiple assets against NSTR collateral. The incident marks the second ora...

Cybercriminals distributed malware disguised as an AI-powered trading tool, replacing legitimate wallet extensions with fake versions designed to capture user passwords.

Apple launched a new AI-powered Siri in September capable of accessing personal information across devices, raising questions about whether the company can maintain its privacy reputation as its AI systems become more in...

State-linked hackers from North Korea and Iran accounted for roughly two-thirds of a 420% increase in onchain malware this year, according to Chainalysis. Meanwhile, Hong Kong-based exchange CoinEx announced its closure ...

Revolut denied receiving direct contact or ransom demands after hackers stole data from approximately 680 high-net-worth European customers through social engineering attacks impersonating government authorities.