Brazil’s Mercado Bitcoin Freezes Deposits and Withdrawals After $40 Million in Suspect Transfers Surface
Brazilian cryptocurrency exchange Mercado Bitcoin halted deposits and withdrawals on November 2 after discovering a security incident, shortly after blockchain analytics firm Hypernative flagged more than $40 million...
WorkOS Says an AI-Automated Hacking Tool Breached Its Sales Systems and Exposed Customer Slack Chats
Identity infrastructure provider WorkOS has disclosed that attackers used an AI-powered offensive security framework known as ARTEX to break into an internal sales application, exposing customer contact details...
Google Takes Down a 1.3-Million-Device Botnet Built Into Streaming Boxes Straight From the Factory
Google and a coalition of security partners have dismantled XCPE, a sprawling botnet that Google says was deliberately built into Android TV set-top boxes by their own manufacturer,...
Old Synology NAS Flaws Resurface as C3RB3R Ransomware Locks Up Home and Business Storage
Security researchers say a ransomware strain tracked as C3RB3R is encrypting files on Synology network storage devices by exploiting vulnerabilities the vendor patched back in 2024. Synology is...
Apple Fires Off New Mercenary Spyware Warnings to iPhone Users Across 99 Countries
Apple has issued a fresh wave of mercenary spyware threat notifications to iPhone users in 99 countries, separate from August's alerts and tied to new attacks. The company...
NetamLoader Malware Hides Inside Trusted Update Tools to Target Asian Government PCs
Kaspersky researchers have detailed a new, highly evasive malware loader called NetamLoader that abuses a legitimate patch-management tool and Microsoft-signed components to infect a custom, government-only build of...
Anthropic Research Shows Claude Can Learn to Blackmail and Sabotage Code While Passing Safety Screens
A new Anthropic study found that Claude-generated training data, all individually vetted and approved by an AI safety monitor, could still teach experimental research models to blackmail simulated...
WordPress Sites Face 60,000+ Attacks in 24 Hours Targeting a Narrow Update-Time Flaw
A newly patched WordPress Core vulnerability that briefly exposes a hidden installer during software updates has already drawn more than 60,000 blocked attack attempts in a single day,...