News · via SecurityWeek
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.
Cryptocurrency
Coverage tagged "Cryptocurrency".
News · via Recorded Future
TAG-217 Targets South Korean Financial Services with ARTEX
The threat actor linked to recent AI-assisted attacks on South Korean financial institutions was testing infrastructure and assembling attack tools as early as August 2026, weeks before the banking…
News · via The Hacker News
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The…
![Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)](/media/2610/ad2da42335bd04d605dce69f-780.webp)
News · via SANS Internet Storm Center
Panchan's Mining Island [Guest Diary], (Wed, Oct 14th)
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program] Crypto mining malware has been active and spreading across the internet for quite some time now…
News · via Horizon3.ai
CVE-2026-105133 and CVE-2026-105134 | AhsayCBS Authentication Bypass and Remote Code Execution Vulnerabilities
CVE-2026-105133 and CVE-2026-105134 affect AhsayCBS (Cloud Backup Server), the centralized management server for Ahsay backup software. Attackers are chaining these vulnerabilities to bypass…
News · via The Record
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains.
News · via CERT/CC
VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic
Overview Five Name Constraints findings in BoringSSL (VU#410595.8–.12) describe cases where certificate names may not be constrained as intended. Records .8, .9, .10 and .12 concern the legacy…
News · via oss-security
DPDK security advisory: Multiple vulnerabilities in vhost/vhost-crypto/vDPA/GSO libraries
Posted by Maxime Coquelin on Oct 14 Multiple vulnerabilities were fixed in DPDK. Downstream stakeholders were warned in advance in order to coordinate the release of fixes and reduce the…
News · via Krebs on Security
U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics…
News · via CyberScoop
DOJ charges 14 over a sprawling North Korean remote work scheme
Federal authorities have charged 14 people and seized roughly 187 computers in their newest effort to disrupt North Korea’s remote IT worker scheme. The Justice Department announced the indictment…
News · via CERT/CC
VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
Overview This note covers differences in how TLS libraries interpret X.509 Name Constraints. A certificate that one library accepts may be rejected by another. Some of those differences are defects…
News · via The Record
Ledger says hardware implant in cryptocurrency wallets stole recovery phrases
Ledger cryptocurrency wallets sold through a Southeast Asian reseller had an implant allowing outsiders to drain funds, the company said.
News · via Cyble
“Don’t Get Played”: TOKEN2049 Security Event Faces Remote-Access Scam Allegations
A crypto security event that promised to teach attendees how to avoid scams is now the subject of scam allegations.
News · via SecurityWeek
$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.
News · via Hudson Rock
First Physical Robbery Potentially Linked to Revolut Data Breach
First Physical Robbery Potentially Linked to Revolut Data Breach Following the recent Revolut hack we reported on, we are now seeing the terrifying real-world consequences of compromised customer…
News · via Malwarebytes Labs
Your “Who’s this?” reply is exactly what text scammers want
Scammers are finding different ways to use personal details exposed in data breaches to lure people into conversations. Last week, we showed how a Facebook Marketplace listing used the recipient’s…
News · via BleepingComputer
Ledger confirms hardware wallet spy implant behind crypto thefts
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets.
News · via The Hacker News
Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports
Cryptocurrency hardware maker Ledger has temporarily paused sales of its products via Cryptobilis following reports of stolen funds linked to devices sold by the reseller. On Friday, the company said…
News · via CyberScoop
Your AI agent is only as safe as the packages it downloads
Strip away the model names and the headlines, and this year’s AI agent incidents share a feature that has little to do with how capable the models are. Nearly all of them ran through the software…
News · via SOCRadar
Inside ICMacOS: From an Infostealer to a Persistent RAT
Inside ICMacOS: From an Infostealer to a Persistent RAT Over the past few years, Apple’s enterprise footprint has expanded significantly, with macOS capturing an important share of the global desktop…