AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Attackers used ARTEX, an AI-driven penetration testing tool, to breach South Korean financial institutions and steal data, according to The Hacker News. The campaign shows how offensive AI tooling built for legitimate security testing can be repurposed for real intrusions against high-value financial targets. It raises fresh concerns for banks and regulators about defending against automated, AI-assisted attack chains.
Sri Lankan authorities arrested the wife of former President Mahinda Rajapaksa in connection with a corruption case. The move is a high-profile step in accountability efforts involving the powerful Rajapaksa family, which has faced scrutiny over alleged graft and economic mismanagement.
CISA, the FBI, NSA and international partners issued a joint advisory warning that a China-based cybersecurity company is enabling threat actors to target critical infrastructure sectors worldwide. The alert highlights the firm's role in supplying tools, training and cover for state-linked hacking, urging operators of energy, water, transport and other essential systems to harden their defenses.
Security expert Bruce Schneier examines how surveillance tools and digital platforms help authoritarian regimes monitor and control populations, while the same technologies also enable dissent and organize opposition. The analysis argues that technology is a double-edged sword for autocrats, and understanding this dynamic is key to predicting how digital tools will shape political power.
A phishing toolkit called Wazza is being used to attack banking, government, and manufacturing organizations across the United States, European Union, and Australia. The kit lets attackers quickly spin up convincing credential-stealing pages aimed at high-value targets in several industries at once. Its spread matters because it lowers the skill barrier for financially and espionage-motivated phishing campaigns against critical sectors.
Security researchers identified 16 malicious Firefox add-ons that impersonate the Rabby and OKX crypto wallets, tricking users into handing over their wallet recovery phrases. Once a phrase is captured, attackers can drain the victim's funds entirely. The campaign highlights the ongoing risk of fake wallet extensions in browser marketplaces.
The U.S. State Department is offering up to $10 million for information leading to Zhang Yu, a Chinese national charged over the HAFNIUM hacking campaign that exploited Microsoft Exchange Server flaws in 2021. The group breached tens of thousands of organizations worldwide, mostly in the U.S. The reward signals continued pressure on state-linked cyber actors.
The owner of cybersecurity firm MonsterCloud has been accused of billing clients more than $19 million while secretly paying ransomware operators to decrypt their data. Prosecutors say the alleged scheme deceived customers who believed the company was recovering files without capitulating to attackers. The case raises concerns about trust in ransomware recovery and incident-response vendors.
Attackers compromised the Tensorlake package on the npm registry, using it to distribute the Shai-Hulud worm, which harvests developer credentials and secrets. The malware can spread to other packages and projects, making any environment that installed the affected version at risk. It is the latest in a series of npm supply-chain attacks targeting the software development ecosystem.