Recent news and analysis on Cybersecurity

Latest cybersecurity threats, data breaches, hacking incidents, security vulnerabilities, ransomware attacks, and expert guidance on digital security.

• Three indicted in $129M AI impersonation fraud scheme

  Three people have been indicted for using artificial intelligence to impersonate corporate leaders in a $129 million fraud scheme running from July 2024 to February 2026. The indictment was filed in U.S. District Court in New York by the Southern District Attorney's Office. The trio was arrested between June and September in Spain and the UK. Stolen funds were converted into cryptocurrency and distributed among conspirators across multiple countries including the US, Spain, Portugal, and China.

• Researchers find residential proxy services on White House network

  Cybersecurity researchers discovered residential proxy services originating from the White House network, exposing a potential security flaw. Synthient identified Windows devices beaconing to known proxy providers like Geonode and Infatica, suggesting an employee may have connected a personal device with compromised software.

• OpenAI AI pipeline patches 948 Linux vulnerabilities in hours

  OpenAI released GPT-6 Cyber to vetted customers, rating it "Critical" due to increased misuse attempts. The model identified 81 high-severity Firefox vulnerabilities and 948 Linux kernel flaws, including 588 previously unknown ones. OpenAI disclosed 304 critical findings with proposed patches to maintainers.

• North Korea trains hackers from childhood for cyber heists

  Defectors reveal North Korea systematically recruits students around age 11 to train as elite cyber operatives, rewarding them with apartments and hard currency. Blockchain firms attribute the $6.3 billion Binance hack to group "TraderTraitor," while Pyongyang denies responsibility.

• Open Chinese AI models match closed ones in hacking

  Research from Vals indicates that open-weight artificial intelligence models, specifically China's DeepSeek, have reached parity with restricted frontier models in executing complex cyber attacks. The findings suggest that previous industry efforts to limit access to advanced AI capabilities are no longer effective barriers against widespread cybersecurity threats.

• Japan launches cyber rescue team amid hacking surge

  Japan will launch a "cyber rescue team" in response to a wave of hacking incidents against businesses. Prime Minister Sanae Takaichi announced the initiative includes security countermeasures and strengthened investigation systems, funded initially by 10 billion yen. The package aims to support victims amid rising cyber threats and unauthorized data leaks.

• AI gives hackers lopsided advantage over corporate defenders

  Security experts warn that artificial intelligence has provided attackers with a significant edge, marking the beginning of a reckoning for corporate cybersecurity. This development highlights the escalating vulnerability of business defenses against AI-enhanced threats.

• Alpine Linux SSH Vulnerability Allows Passwordless Access

  The flaw, identified as CVE-2026-123158, allows attackers to log into key-only accounts by sending a password between 257 and 1024 bytes long when Pluggable Authentication Modules are disabled. Affected systems include Adélie Linux, Void Linux, Sabotage Linux, OpenWrt, and the Yocto Project.

• Chainalysis discloses account breach exposing user tokens

  Blockchain analytics firm Chainalysis revealed attackers accessed customer accounts, exposing password hashes and live tokens. The breach, which involved AI-assisted on-path attacks in October, affects high-profile clients including the FBI, US Air Force, Microsoft, and Coinbase. The company has taken its KYT service offline while investigating.

• US expands Pacific cyber hub for cable defense

  The US military has expanded its cybersecurity presence in Hawaii and established a regional centre to detect threats to Pacific communications networks. These measures address concerns over undersea cable security and alleged Chinese targeting of critical infrastructure, though officials have not explicitly linked the new initiatives to Beijing.