Jonathan Spalletta, a 36-year-old U.S. national, was charged with exploiting smart contract vulnerabilities at decentralized exchange Uranium Finance in April 2021, draining millions and forcing the platform to shut down. He allegedly laundered proceeds through services including Tornado Cash and spent some funds on collectibles before U.S. authorities seized about $31…
Category: Cyber Security News
The FBI warned that foreign-developed mobile apps, particularly those from China, pose data security risks because they may be subject to local laws that allow government access to user data. The alert said such apps could collect personal information, store data in China, and even contain malicious code or backdoors, and…
Google rolled out a Chrome Stable Channel Update that patches 21 security vulnerabilities, including an actively exploited code smuggling flaw. Users should install the new versions (146.0.7680.177/178 for Windows and Mac, 146.0.7680.177 for Linux) immediately to mitigate the high-risk issues and reduce exposure to attacks. #Chrome #CVE-2026-5281…
Google released emergency updates to patch a use-after-free vulnerability in Dawn (WebGPU) tracked as CVE-2026-5281 that was being exploited in the wild, marking the fourth Chrome zero-day fixed this year. The out-of-band Stable Desktop update is rolling out for Windows, macOS, and Linux while Google restricts full bug details until a majority of users are updated. #CVE-2026-5281 #Chrome
The FBI warned Americans that foreign-developed mobile apps, particularly those maintained by Chinese companies, can pose significant privacy and data-security risks by collecting extensive personal information. The advisory urges users to limit data sharing, keep devices updated, download verified apps, use strong password managers, and report suspected compromises to the IC3 platform. #TikTok #ByteDance
Google has attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean cluster tracked as UNC1069. The attackers pushed trojanized Axios releases that installed a malicious dependency “plain-crypto-js” which deployed the SILKBELL dropper and the cross-platform WAVESHAPER.V2 backdoor. #UNC1069 #WAVESHAPERV2…
Pawn Storm (APT28/Fancy Bear) has escalated operations in early 2026 by deploying a coordinated malware suite called PRISMEX to disrupt Ukrainian defense and Western military aid infrastructure. Trend Micro finds the campaign exploits CVE-2026-21513 and CVE-2026-21509, leverages advanced steganography, fileless techniques, COM hijacking, and Filen.io for C2 to strike NATO logistics…
Researchers at Palo Alto Networks demonstrated how AI agents built on Google Cloud’s Vertex AI can be weaponized to exfiltrate data, create backdoors, and compromise infrastructure. They showed that the Per-Project, Per-Product Service Agent (P4SA) has excessive default permissions that attackers can abuse to move from an agent’s execution context into…
A supply chain attack on the popular Axios NPM package published two backdoored releases that executed cross-platform payloads via a staged dependency and were downloaded by roughly 3% of users before removal. Security researchers attribute the operation to North Korean threat actor UNC1069, which used compromised maintainer credentials and long-lived NPM…
A supply chain compromise in the widely used LiteLLM open-source project led to a data breach that impacted thousands of companies, including AI recruiting startup Mercor. The incident has been linked to hacking group TeamPCP while extortion group Lapsus$ also claimed access, and investigations are ongoing with limited clarity about the…
Google has made its AI-powered Google Drive ransomware detection generally available and enabled it by default for paid Google Workspace customers. The feature pauses desktop file syncing when ransomware is detected, notifies users and admins, and provides guided file recovery through the Drive restoration tool. #GoogleDrive #GoogleWorkspace
The ransomware group Inc claims it hacked the city of Meriden, Connecticut and posted sample documents on its data leak site. Meriden reported weeks of system disruptions — including delayed water bills and prolonged outages at the city clerk and tax collector offices — while officials have not confirmed the breach…
Anthropic confirmed that internal source code for its AI coding assistant Claude Code was inadvertently published via an npm package release, exposing nearly 2,000 TypeScript files and extensive implementation details. The leak led to public reposting and opportunistic typosquatting amid concerns about a trojanized Axios dependency and potential jailbreaks and dependency-confusion…
North Korean–linked hackers attributed to UNC1069 compromised the widely used axios npm package in a supply chain attack that published malicious releases, deploying a multi-stage RAT across Windows, macOS, and Linux. The incident exploited a hijacked maintainer account, bears resemblance to WAVESHAPER activity, and highlights the fragile software supply chain and…
The personal email account of FBI Director Kash Patel was breached by the Iran-linked Handala Hack Team, which published private photographs and a sample of over 300 emails from 2010–2019. The incident highlights weak personal account security and a broader Iran-linked hack-and-leak campaign that prompted FBI and State Department responses while…