Tag: #cybersecurity

Japan and Allies Attribute Global Hacking Campaign to North Korea‑Linked 'WaterPlum', Say 30,000 Devices Compromised

Japan, U.S. and allied cyber agencies say North Korea‑linked 'WaterPlum' infected 30,000 devices in 100+ countries and stole crypto from over 7,000 wallets.

#cybercrime, #northkorea, #cybersecurity, #cryptocurrency

Boston Scientific Says Cybersecurity Incident Likely Material, Will Miss 2026 Guidance

Boston Scientific says an Aug. cyber incident is likely material, disrupted global manufacturing and shipments and makes meeting 2026 sales and EPS guidance unlikely.

$BSX, #bostonscientific, #cybersecurity, #medicaldevices, #earnings

Cosmos Labs: Shared Cosmos EVM Vulnerability Exploited on Six Chains, $5.7M Taken

Cosmos Labs says an underflow bug in its shared Cosmos EVM module was exploited across six blockchains in August, enabling roughly $5.7M in cash-outs.

#blockchain, #cybersecurity, #cosmos, #cryptocurrency

DOJ and FBI Seize Domains Tied to China-Linked Hacking Platforms QScan and QTRouter

DOJ and FBI seized domains tied to QScan and QTRouter, disrupting infrastructure U.S. authorities say China-linked hackers used to target government agencies and critical networks.

#cybersecurity, #china, #fbi, #cyberespionage

Justice Department Charges 17 Iranians in Yearslong Hack of U.S. Universities That Stole 31.5 TB of Research

DOJ unsealed an indictment charging 17 Iranians tied to the Mabna Institute over a yearslong hacking campaign that stole 31.5 TB of research from 144 U.S. universities.

#cybersecurity, #iran, #hacking, #academia, #justice

Trump signs memorandum allowing vetted U.S. firms to conduct cyber operations against foreign cybercriminals

A White House memorandum authorizes vetted U.S. companies, under DOJ and DHS oversight, to conduct surveillance and disruptive cyber operations against foreign cybercriminal groups.

#cybersecurity, #cybercrime, #whitehouse, #nationalsecurity

Amgen discloses material cybersecurity incident after data exfiltration from third‑party cloud environments

Amgen disclosed a material cybersecurity incident in a July SEC filing, saying unauthorized activity in third‑party cloud environments led to exfiltration of proprietary and patient data.

$AMGN, #amgen, #cybersecurity, #biotech, #sec

NVIDIA Launches Open Secure AI Alliance to Build Open Tools for AI Security

NVIDIA on July 27 launched the Open Secure AI Alliance, teaming with major tech and security firms to build open models, tools and incident-response capabilities for AI security.

$NVDA, #nvidia, #ai-security, #open-source, #cybersecurity

Google DeepMind Expands Gemini Flash Lineup with 3.6 Flash and Security-Focused 3.5 Variant

Google DeepMind added Gemini 3.6 Flash plus two 3.5 variants, including a restricted 'Flash Cyber' model for defensive vulnerability discovery and repair.

$GOOGL, $GOOG, #google, #ai, #gemini, #cybersecurity

Kaspersky details OkoBot malware that injects fake wallet recovery screens to steal seed phrases

Kaspersky warns of OkoBot: Windows malware injecting fake recovery screens into hardware-wallet companion apps to steal crypto seed phrases.

#cybersecurity, #malware, #cryptocurrency, #hardwarewallets, #supplychain

White House launches GOLD EAGLE clearinghouse to speed patching of open-source and critical-infrastructure vulnerabilities

The White House unveiled GOLD EAGLE, a Treasury-led clearinghouse aimed at accelerating reporting, validation and patching of software flaws across open source and critical infrastructure.

#cybersecurity, #ai, #open-source, #whitehouse

Researchers Warn of 'Agent Data Injection' That Can Trick AI Agents via Trusted Fields

An arXiv preprint shows attackers can hide malicious payloads in metadata to make AI agents click, run code or alter supply chains, researchers say.

#ai, #security, #agents, #cybersecurity

Navient says law-firm ransomware exposed borrower Social Security numbers

Navient told the SEC a ransomware attack on an outside law firm accessed borrower data — including names, addresses, dates of birth and Social Security numbers.

$NAVI, #navient, #data-breach, #cybersecurity, #student-loans

Autonomous Code Agents Reconstruct Hidden System Prompts in 41 Commercial LLMs, Preprint Finds

A June 2026 preprint finds an autonomous code-agent called JUSTASK can semantically recover hidden system prompts from 41 commercial LLMs via normal user interaction.

#ai, #promptsecurity, #llms, #cybersecurity

iRhythm Says Data Exfiltrated From Third‑Party Business Apps; Devices, Patient Care Unaffected

iRhythm reported that data was exfiltrated from third‑party business applications; its devices and clinical systems were not affected, and the investigation is ongoing.

$IRTC, #irhythm, #cybersecurity, #data-breach, #healthcare