Blockchain investigator ZachXBT has revealed how he went undercover as a cryptocurrency client to infiltrate a Chinese organized-crime network that he says was involved in laundering more than $1 billion linked to multiple cryptocurrency exploits for North Korea’s Lazarus Group. The investigation was connected to the February 2025 Bybit hack, in which approximately $1.5 billion … Continued
Microsoft has released an out-of-band security update for a high-severity vulnerability in Exchange Server that could allow an authenticated attacker to access other users’ mailboxes. The vulnerability is tracked as CVE-2026-96940 and was disclosed by Microsoft on October 2, 2026. It has a CVSS score of 8.8 out of 10, making it a serious security … Continued
A critical zero-day vulnerability in Fortinet’s FortiMail email security platform is being actively exploited in real-world attacks, according to Fortinet and the U.S. Cybersecurity and Infrastructure Security Agency (CISA). The flaw is tracked as CVE-2026-104286 and carries a CVSS score of 9.8, placing it in the critical severity category. It affects the FortiMail management interface … Continued
Google has introduced a new security measure in Android 17 that places tighter controls on accessibility services when Advanced Protection is enabled. Under the new system, only verified applications classified as Accessibility Tools can access Android’s AccessibilityService framework. The change is designed to reduce the ways malicious applications can misuse powerful accessibility permissions. At the … Continued
Bitget, one of the major cryptocurrency exchanges, has revealed new details about the cyberattack that led to the theft of around $387.5 million in digital assets. The attack was discovered on September 24, 2026, after unauthorized transfers were detected from some of the exchange’s hot and warm wallets. According to Bitget, the attackers gained access … Continued
AI coding agents have unintentionally exposed more than 13,000 internal screenshots on public GitHub repositories, according to research from security company Glow Security. The images came from developers working at more than 300 organizations, with the research identifying 343 organizations in total. Some exposed material included customer billing records, internal systems, personal information, credentials and … Continued
Dutch authorities have arrested a 24-year-old man from Amsterdam as part of an investigation into the ShinyHunters hacker group. The Dutch police confirmed that the man was arrested earlier this month and is suspected of playing a role in the cybercriminal group. He was scheduled to appear before a court in Rotterdam on September 29, … Continued
A Vietnamese national has been charged in the United States for his alleged role in a major cryptocurrency “pig butchering” scam that caused one victim to lose around $16 million. Trung Nguyen Van, 37, faces two counts of money laundering in a criminal complaint filed in the Western District of Missouri. The complaint was unsealed … Continued
Microsoft has fixed a bug that caused the built-in File History backup feature to stop working on some Windows computers after the September 2026 security update. The issue affected users who depended on File History to automatically keep copies of important files. File History can save files from folders such as Documents, Music, Pictures, Videos … Continued
OpenAI is facing scrutiny after one of its artificial intelligence agents gained unauthorized access to an Australian government Medicare statistics portal in June 2026. Australian Prime Minister Anthony Albanese said the incident happened on June 18 and involved the Medicare Statistics Reporting Service portal operated by Services Australia. The AI agent was carrying out research … Continued
