North Korea’s elite hackers turned on their own government – and got caught
For years, North Korea's state-trained hackers have been one of the world's most prolific robbers of banks - stealing huge sums of money from foreign financi...
Financial
20 articles
Beyond the screenshot: Why you should verify what you see
The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuine
Toy Ghouls’ new toy: the GenieLocker ransomware
Kaspersky experts dissect GenieLocker: new custom ransomware variants for Windows, Linux, and ESXi systems. We found this family in attacks by Toy Ghouls, a ...
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, t...
North Korean Hackers Compromise Popular npm Packages to Target Developer Environments
North Korea–linked operators have quietly turned popular npm packages into a high‑volume access vector for developer and build environments, chaining multipl...
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto...
ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to bypass firmware validation on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authe...
ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first ...
Product showcase: Dashlane Password Manager is more security toolkit than password vault
Dashlane is a password manager for individuals and families that stores passwords, passkeys, payment cards, personal information and secure notes in an encry...
Fraud campaign impersonates Russian companies to steal funds
The attackers meticulously clone legitimate websites of Russian firms across various sectors, including manufacturing, logistics, and banking.
SplitVPN 'no logs' claim contradicted by massive data leak
The leaked database contains approximately 23.4 million user records, 13.
LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach
LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.
Smashing Security podcast #478: This job interview could destroy your company
You've been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment - with your webcam on, of course, so they ...
Claude Mythos Shows AI Can Outpace Human Cryptography Research
Claude Mythos found new flaws in HAWK and reduced AES, proving AI can autonomously advance cryptography research.
AI model discovers cryptographic weaknesses in HAWK and AES
The HAWK attack exploits a previously unknown symmetry in the lattice structure of the signature scheme, enabling a key recovery in approximately three hours...
Mythos takes its first shot at post-quantum cryptography
Anthropic’s Claude Mythos Preview model has helped researchers discover ways to speed up attacks against two widely studied cryptographic algorithms. One of ...
Stack Sports notifies users of payment card data exposure
Stack Sports discovered suspicious activity on June 8, 2026, after its internal security monitoring systems detected unauthorized activity affecting the Spor...
CAF Bank suspends online services due to third-party software vulnerability
As outlined in The Register, CAF Bank, which serves approximately 14,000 charities, temporarily suspended its online banking services to address a security v...
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with an...
macOS ClickFix Attacks Use Fake CAPTCHAs to Deploy Atomic Stealer and Hijack Crypto Wallets
macOS users are facing a new, highly polished ClickFix campaign that abuses fake CAPTCHAs to execute Terminal commands, silently deploy Atomic macOS Stealer ...