Security

Destinee Ruffin, a former Indianapolis letter carrier, stole checks from the mail and sold them to co-conspirators in a scheme affecting about 6,500 victims, prosecutors said.

Chainalysis disclosed password hashes and live tokens were exposed after initially reporting only non-sensitive customer data was accessed.

Elite hackers tied to the regime reportedly earn spacious homes and hard currency awards, even as Pyongyang denies any role in the $6.3 billion theft.

Core Lightning is urging node operators to install v26.06.10, which adds channel-security, payment-resolution and remote-command fixes, and to review commando credentials.

Polygon has proposed a network upgrade to recover approximately 70.49 million POL tokens, worth around $6.5 million, stolen in two security incidents involving Polymarket and Binance in October 2026.

India's CERT-In says the threat actor CRAFTY FALCON uses AI-driven tools to exploit crypto platforms, banks, and fintech firms, stealing wallet keys and siphoning funds.

India's CERT-In warns of an active AI-powered threat actor targeting crypto exchanges, while South Korea and other Asian regulators step up security measures after the $6.3 billion Binance hack.

Vinod Khosla warns that AI combined with quantum computing could compromise most current encryption before 2030, raising concerns for digital security including cryptocurrencies. NIST is developing post-quantum standards...

Bitquery says attacker drained 36,042 Ethereum deposit addresses for nearly four hours after exchange announced containment, with total theft estimated at $48.6 million across 11 networks.

Blockchain analytics firm Chainalysis says hackers accessed password hashes and active authentication tokens for all users, leading to shutdowns of key compliance and investigation services.

About 12,224 ZEC remain in Zcash's original Sprout privacy pool, and the upcoming NU7 upgrade will make those coins unspendable unless holders move them before activation at block 3,543,405.

CERT-In's CRAFTY FALCON advisory details an ongoing campaign targeting financial institutions, including crypto exchanges, with AI-assisted attacks that steal wallet keys and siphon funds.

Attackers have stolen over $1.1 billion in crypto this year, but less than 1% of the funds have been recovered, highlighting the difficulty of clawing back stolen digital assets.

U.S. bank regulators contacted lenders this week to assess vulnerabilities following the $6.3 billion Binance hack, as banks run diagnostics and review their cybersecurity defenses.

Federal Reserve and OCC contacted U.S. banks to assess suspicious activity, service disruptions, and cybersecurity vulnerabilities following the $6.3 billion Binance theft.

Rithy Ham of Vancouver, Washington, admitted to wire fraud and money laundering after a Portland victim sent more than $333,000 to fabricated profiles over nearly four years.

Anthropic's FlashProve research can cryptographically verify that a specific AI model produced a given output, but the proof generation requires roughly 70 to 95 times the GPU time of ordinary inference, and it does not ...

Ryan James Roach faces charges of hacking university computers to steal credentials and mine cryptocurrency; co-defendant Mathiew James Stubbings remains in Canada as extradition proceedings continue.

UK Finance data shows investment scam losses rose 40% in 2025, with most authorised push payment cases starting online. Wirex's UK payments chief says social platforms host the scams while payment firms bear the cost.

A flaw in TENDRIL's sell hook allowed an attacker to manipulate pool reserves and withdraw nearly all USDT, resulting in a net loss of about $555,000.