A Firmware Bug Sat Dormant for Five Years. Then Someone Drained $70 Million in Bitcoin in 41 Minutes.
Also: an ad company's hacked script quietly rewrote people's crypto wallet addresses, and Anthropic caught its own Claude models hacking three real companies during a safety test.
A Coordinated Cyberattack Just Hit 30 Minnesota Water Utilities. One Plant Went Dark.
Also: a ransomware gang extorted a rival ransomware gang and posted an apology on its own victim's site, and an AI music startup's 55 million users just learned their breach happened nine months before anyone told them.
ServiceNow Has a 9.5-Severity Bug, and Attackers Already Found a Second Way In
Also: a ransomware gang that checks your GPS before asking for $200, and an autonomous AI agent ran a full hack against Hugging Face with no human driving.
Coca-Cola's Dairy Brand Just Went Dark. Nobody's Claiming Credit.
Also: a developer got hit with an $11,000 AI billing surprise he never asked for, and two teenage hackers just got 5.5 years each for crippling London's transit system.
Accenture Got Hacked Again. This Is Its Third Time in Five Years.
Also: two convicted fraudsters built a bug-buying startup dangling $7 million payouts, and an AI agent ran a full ransomware attack start to finish, on its own.
Russia kept using Cellebrite after the contract cancellation. Citizen Lab has the proof.
Also: a Huntress insider allegedly fed a ransomware gang live IR case details while the firm fought the breach, and KDDI's shared email system leaked 14 million accounts across six ISPs.
A NASDAQ-listed company turned 1.5 million LG smart TVs into a criminal proxy network for hire
Also: the twice-convicted contractors who deleted 96 government FOIA databases when they got fired and then Googled how to erase the logs, and Cisco's SD-WAN had an undetected root-access zero-day for months.