Cyber News

Two U.S. nationals were sentenced to prison for running ‘laptop farms’ that let North Korean IT workers pose as remote U.S. employees, infiltrating nearly 70 companies and funneling over $1.2 million back to the regime.

New TRM Labs data shows North Korea-aligned hackers now control roughly 76% of all cryptocurrency stolen worldwide this year, achieved not through more attacks but through fewer, smarter, AI-assisted operations.

A self-replicating npm worm has hijacked packages tied to AI agent tooling company Namastex Labs, harvesting developer secrets and automatically republishing itself across every package a victim can access.

Facing record CVE volume, NIST is overhauling how it runs the National Vulnerability Database, saying it will stop enriching ‘lowest priority’ CVEs so it can keep pace with the flood of new vulnerabilities.

A newly uncovered phishing-as-a-service platform called VENOM has been targeting C-suite executives’ Microsoft credentials since at least November 2025, using techniques built to bypass multi-factor authentication.

Attackers are exploiting GitHub’s own notification system, posting fake VS Code security alerts in the Discussions section of thousands of repositories to trick developers into downloading malware.

Poland’s National Centre for Nuclear Research disclosed an attempted breach of its IT infrastructure, detected and blocked before any damage occurred, with early suspicion pointing to Iranian threat actors.

From fabricated resumes and interview deepfakes to covering their tracks after a breach, Microsoft Threat Intelligence details how attackers are weaving AI into nearly every stage of an attack.

A newly uncovered campaign called Ruby Jumper, attributed to North Korean group APT37, uses a multi-stage toolkit and removable media to breach air-gapped networks once considered nearly impossible to reach.

PayPal has disclosed that a security lapse left customer data exposed for six months within its Working Capital application, raising fresh questions about how long the exposure went unnoticed.