The latest cybersecurity news: hacks, ransomware, data breaches, nation-state campaigns and law-enforcement takedowns.
Arctic Wolf observed attacks using AntiFox, an autonomous AI pentesting platform built on Artex, to steal AWS credentials and move through compromised environments, in some cases reaching production secrets.
Czech web automation platform Apify confirmed that an attacker accessed some customer data on November 9 and 10, using a stolen credential to reach more systems and accounts.
Hosting platform Railway said AI provider keys stored by customers were stolen in an October breach and used for an estimated $740,000 in unauthorized spending. It will pay the charges itself when a provider refuses a refund.
Using an RCE bug in SGLang, the open-source AI inference engine, an attacker ran code on a NEAR AI server, then moved deeper and reached data on about 100 users and 18 AI agents.
Swedish firm Enea uncovered SilentAir, a new spying group that used hacked equipment inside mobile operators in at least six Asian countries to intercept calls and texts of selected targets, mostly in Taiwan.
German defense firm Quantum Systems confirmed a late-October attack by 'hostile actors'. Reports say it came through a malicious update file for QBase, the software that plans its drone missions.
Trezor says three Safe 5 wallets bought from reseller CryptoBilis hid an extra circuit board that reads the recovery phrase and sends it over a cellular link.
Police took down servers for three malware families used for initial access, password theft and ransomware, seizing 6.4 million stolen logins.
The DOJ won court approval to seize or freeze over $1.2 billion in crypto stolen from Binance, a hack it blames on North Korea's TraderTraitor hackers.
The DOJ and FBI seized infrastructure behind FaceStealer, a North Korean scheme that used fake video calls to steal over $400 million in crypto in 18 months.
