Security firm PromptArmor discovered that Atlassian's Rovo AI agent is vulnerable to indirect prompt injection via invisible text in uploaded documents, allowing data exfiltration without user approval.
North Korean state-backed hacking group Kimsuky is using artificial intelligence to automate spear-phishing attacks against military, diplomatic, and academic targets, according to South Korean cybersecurity firm Genians.
Researchers at Zenity revealed severe security vulnerabilities in AI-enabled web browsers, including OpenAI's Atlas, allowing attackers to execute prompt-injection attacks, spam WhatsApp contacts, and manipulate online shopping accounts.
Cross-chain bridge Allbridge paused its Core protocol after an attacker stole about $1.65 million from its Solana stablecoin liquidity pools using a flash loan from Kamino. Allbridge urged liquidity providers to withdraw and asked profiting traders to return funds.
Crypto losses decreased by 46.8% to $1.32 billion in H1 2026, but security firms CertiK and TRM Labs warn this drop is misleading. Attackers are becoming more sophisticated, with North Korean state-sponsored hackers responsible for over 70% of Q2 losses, prompting international discussions.
A private security firm, Sainik Security Services, has denied involvement in the alleged embezzlement of Ram temple donations, stating it only provided 22 housekeeping staff to the SBI's Ayodhya branch. Six of the firm's recruits are among eight arrested in the ongoing investigation.
Anthropic's advanced AI model, Mythos 5, will be accessible to a select group of US cybersecurity firms and infrastructure providers after the US government authorized a limited release. This follows earlier concerns over national security that led to its suspension.
China's embassy in the UK has urged the British government to cease "slander and suppression" after two men linked to the Hong Kong Economic and Trade Office in London were jailed for spying on activists. A manager at the office received an eight-year sentence, while a security firm operator and former UK Border Force officer was imprisoned for 10 years.
The Chinese embassy in the UK has urged the British government to cease "slander and suppression" after two men connected to the Hong Kong Economic and Trade Office in London were jailed for spying on activists. One received 8 years, the other 10, for assisting a foreign intelligence service.
Two men linked to the Hong Kong Economic and Trade Office in London were sentenced to up to 10 years in prison on Thursday for spying on activists. Bill Yuen Chung-biu received eight years, and Peter Wai Chi-leung received 10 years for assisting a foreign intelligence service.
Russia has lifted its ban on the gaming platform Roblox following widespread complaints from children and parents. The platform was banned in December for allegedly distributing extremist materials and promoting "LGBT propaganda."
Data storage security company Cyera is reportedly close to securing at least $300 million in funding at a $12 billion valuation. The company has surpassed $150 million in ARR but remains unprofitable, with spending on sales staff and job growth.
Korean security companies are speeding up their efforts to enter next-generation markets like quantum security and public mydata authentication. Genians is developing quantum-resistant gateway technology, Raonsecure is targeting the public mydata digital authentication market with its OmniOne CX service, and Gabia has been selected as a supplier for the '2026 High-Performance Computing Support Project'.
Athletes are increasingly targeted by cybercriminals using AI-driven scams, data breaches, and social media exploitation, with significant financial losses reported in the sports industry.
Palo Alto Networks warns companies have a 3-5 month window to enhance software defenses before AI-driven exploits become common, as hackers increasingly use AI models like Anthropic's Mythos and OpenAI's GPT-5.5-Cyber to find and exploit vulnerabilities.
Crypto investors have lost more than $100 million to physical extortion in the first four months of 2026, according to blockchain security firm CertiK, as criminal groups increasingly target the people behind digital wallets rather than the technology securing them. The attacks, known in the industry as “wrench attacks,” use kidnapping, assault, threats, or other […] The post IRL crypto threats: Physical “wrench attacks” have led to over $100 million in losses since January alone appeared first on CryptoSlate.
Bryan Pellegrino, co-founder and CEO of LayerZero, disputes Kelp DAO’s accusations and said a postmortem by external security firms will be published soon.
ICE has contracted with Virginia-based private security firm MVM to locate migrant children who arrived in the US without parents, despite the company facing torture allegations. MVM is being sued over the 2017 separation of two Guatemalan fathers from their children, with the lawsuit alleging torture, enforced disappearance, and cruel treatment. A DHS spokesperson defended the partnership as focused on child welfare checks, while Democratic lawmaker Delia Ramirez criticized the arrangement as reckless.
MoonPay has acquired Sodot, an Israeli crypto security infrastructure provider, for approximately $100 million in an all-stock transaction. The deal, which closed in April, will use Sodot's multi-party computation key management technology as the foundation for MoonPay's new institutional division serving financial institutions, asset managers, trading firms and exchanges. Former CFTC acting chair Caroline Pham will lead the new unit.
Checkmarx, a security firm, has suffered a devastating series of breaches over 40 days. It was first compromised through a supply-chain attack on the Trivy vulnerability scanner on March 19, with attackers pushing malware that stole credentials. Checkmarx's own GitHub account was then breached on March 23, pushing malware to its users. Despite remediation, a new malware wave appeared April 22. The Lapsu$ ransomware group subsequently dumped stolen data on the dark web on March 30, originating from Checkmarx's GitHub repositories. Another security firm, Bitwarden, was also affected in the same Trivy supply-chain attack.
Police in Malaysia's Penang state have found that ethnic Indians are significantly less likely to fall for online scams compared to other racial groups. Only 7% of 5,090 scam cases reported in Penang last year involved Indian victims, despite scammers targeting all communities equally. Penang CCID deputy chief Pang Meng Tuck attributed this to Indians responding to scammers with a barrage of questions. The findings come as Malaysia removed over 98,500 scam-related posts in 2025, up from 63,652 in 2024.
Nikesh Arora, CEO of Palo Alto Networks, reassures the tech world. He states artificial intelligence will not replace cybersecurity firms. Arora explains AI's current limitations in accuracy and enforcement. He highlights the need for specialized security software to manage complex company rules. This presents opportunities for investors amid market panic.
Angelo Martino, a former ransomware negotiator at DigitalMint, pleaded guilty to helping the ALPHV/BlackCat ransomware gang extort companies by feeding them confidential victim information including insurance policy limits and negotiation strategies. He is the third ransomware negotiator in the past year to face jail for this scheme, admitting to playing both sides in five incidents. Martino faces up to 20 years in prison and authorities have seized $10 million in assets.
Twelve UK universities paid over £440,000 to Horus Security Consultancy, a private security firm run by former military intelligence officials, to spy on pro-Palestine student protesters and academics. The firm gathered social media intelligence and conducted counter-terror threat assessments, including on a Palestinian-American academic. One LSE PhD student discovered she was flagged in daily "encampment updates" sold to universities for £900 monthly. Universities defended the practice as "horizon scanning" for security risks.
