News related to
theft

EY breach reaches Goldman Sachs, Man Group clients

Ernst & Young has notified clients linked to Goldman Sachs’ wealth management business and hedge fund Man Group that personal and financial information was compromised through a technology platform used to support EY’s tax services. The disclosures broaden the known impact of a cyber incident first reported to US regulators in July. Affected information included names, addresses, tax identifiers, email addresses and financial details connected with investment […]

BlockTower founder presses $25m Coinbase loss claim

BlockTower Capital founder Ari Paul has accused Coinbase of failing to return about $25 million belonging to his firm, while alleging that similar security breaches affected at least a dozen institutions and involved more than $1 billion. Paul, BlockTower’s founder and chief investment officer, made the claims in a social-media post on September 28, saying the loss occurred “a couple years ago”. He alleged that what initially […]

Rockstar attack review maps identity and pipeline weaknesses

A September security analysis of breaches affecting Rockstar Games has highlighted how compromised identities, third-party integrations and development assets can defeat enterprise controls without attackers exploiting a conventional network perimeter. The analysis by security consultancy Lares reconstructs incidents spanning the 2022 Grand Theft Auto VI leak, an April 2026 third-party breach and the unauthorised release of GTA VI material in August. Its detailed attack-chain findings, however, go […]

Opposition MPs March To ECI On The 5th Day Of Anti-CEC Protest

Bitget probes breach with Mandiant and SlowMist

Cryptocurrency exchange Bitget has published independent findings from Mandiant and SlowMist into its September 24 security breach, with both investigations tracing the intrusion to compromised third-party security products that enabled unauthorised access to the exchange’s wallet environment. The disclosure sharpens the explanation of an incident initially valued at about $351.6 million and later revised to approximately $387.5 million after additional on-chain tracing identified affected transactions involving Zcash […]

Battle Over CEC Enters Consequential Phase, A Political Flashpoint

By Dr. Gyan Pathak On the very first day of the protests on October 2, by INDIA bloc and other opposition political parties, Cockroach Janata Party (CJP), Civil societies, and common people against CEC demanding his resignation across the country, particularly in Delhi and Mumbai, the campaign entered a consequential phase and at a political […]

The article Battle Over CEC Enters Consequential Phase, A Political Flashpoint appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

‘CEC Is PM Narendra Modi’s Tool’ Is The New Political Narrative

By Dr. Gyan Pathak The new political narrative brought forward by the opposition INDIA bloc is that CEC Gyanesh Kumar is PM Narendra Modi’s tool through whom electoral democracy of India has been hijacked. No wonder, BJP is trying their best to defend CEC Gyanesh Kumar, to defend PM Modi, who is now in the […]

The article ‘CEC Is PM Narendra Modi’s Tool’ Is The New Political Narrative appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

‘Save Democracy’ Rallies From Oct 2-8, INDIA Bloc March To ECI On Oct 6

By Dr. Gyan Pathak On the morning of September 30, 2026, Delhi witnessed display of a series of hoardings, unclaimed by any organization but believed to have been put on behalf of the BJP, that targeted leaders of opposition before INDIA bloc meeting, and claiming rift among their leaders. BJP separately criticised Leader of Opposition […]

The article ‘Save Democracy’ Rallies From Oct 2-8, INDIA Bloc March To ECI On Oct 6 appeared first on Latest India news, analysis and reports on Newspack by India Press Agency).

Pentagon confirms breach affecting more than three million

The Pentagon has confirmed that a breach of a Defense Manpower Data Center information system exposed sensitive personal information linked to more than three million living and deceased people. A US defence official said the incident affected 2.76 million living individuals and about 294,000 deceased people, establishing a clearer scale for an intrusion that exposed Social Security numbers and personnel information held by the department. The Defense […]

BotHelper RAT gives attackers live Windows screen access

Cybersecurity researchers have identified a previously undocumented Windows remote access trojan that can continuously stream an infected computer’s display to its operators while supporting command execution, downloads, clipboard monitoring and other remote-control functions. Point Wild’s Lat61 Threat Intelligence team named the malware BotHelper RAT after the Bot. Helper namespace found in its. NET assembly. Its analysis, published on September 24, traced a multi-stage infection chain beginning with […]

Kiteworks eases shutdown after isolating security flaw

Kiteworks has withdrawn its broad precautionary shutdown recommendation for most customers after an emergency security review isolated a critical vulnerability to its Advanced Forms product, while installations using that feature were advised to remain offline pending a fix. The secure file-transfer and private-data communications company had asked customers worldwide to take systems offline during a weekend window after receiving what it described as credible intelligence from federal […]

THORChain rejects Bitget request to block hacker wallets

THORChain has rejected Bitget chief executive Gracy Chen’s call to block addresses linked to the cryptocurrency exchange’s $387.5 million security breach, arguing that its permissionless network cannot selectively censor transactions. The dispute emerged after assets stolen from Bitget were routed through cross-chain services, including THORChain, and converted into Bitcoin. Chen publicly urged the protocol to refuse service to attacker-controlled addresses that had already been identified and flagged, […]

Researchers trace phishing domains before AliExpress campaign

Security researchers say they identified 10 suspicious domain names weeks before they were registered, then watched the addresses become active as disposable gateways to an AliExpress-themed phishing operation. EfficientIP Research Labs said the. cyou domains were identified on June 9 and added to its DNS Threat Pulse intelligence feed. The addresses were registered and began resolving to internet protocol addresses on July 2, allowing investigators to connect […]

Salesforce patches Agentforce flaws enabling zero-click data theft

Salesforce has patched three vulnerabilities in its Agentforce artificial intelligence platform that researchers said could have enabled unauthenticated attackers to extract sensitive customer relationship management data without victims clicking malicious links. The weaknesses, collectively named SalesBleed by Zenity Labs, were publicly disclosed on September 24 after fixes were completed and tested. Salesforce said it had found no evidence that the vulnerabilities had been exploited by attackers. The […]

Bitget chief links $387.5 million breach to North Korea

Bitget chief executive Gracy Chen has said preliminary evidence indicates North Korean-linked hackers were likely behind a security breach that transferred about $387.5 million in crypto assets from the exchange’s wallets. The assessment remains unconfirmed, but Chen said investigators had identified internet protocol behaviour and on-chain patterns consistent with techniques used by known North Korean hacking organisations. Bitget has not publicly named a specific group, and the […]

Fake Firefox add-on targets Google sessions for takeover

A malicious Firefox extension posing as a PDF identity-verification tool has been found hijacking Google accounts by stealing authenticated session cookies and remotely automating account changes after installation. Security researchers at Socket said the add-on, identified as PDF Identity Verifier and carrying the extension ID pdf-para-texto@extensao. local, was published on Mozilla’s Firefox Add-ons store on September 3. Malicious functionality appeared in version 1.4 on September 11, while […]

Hackers widen WordPress attacks across 29 countries

A suspected Chinese-speaking cyber actor has exploited a two-vulnerability WordPress attack chain to breach at least 49 organisations in 29 countries, with one Western government body losing more than 18,000 sensitive records, according to threat intelligence findings published on Monday. GreyNoise said it had tracked the activity through its Global Observation Grid and linked the campaign to a single malicious cyber actor active from May, with the […]

EtherHiding shifts malware control to Polygon blockchain

A malware campaign using the EtherHiding technique has exploited the Polygon blockchain to conceal and dynamically rotate command-and-control infrastructure while stealing banking and cryptocurrency credentials from infected users. Security researchers tracing the operation said it has been active since at least November 2025 and has compromised at least 31 legitimate business websites across several countries and industries. The campaign has evolved from deploying a general-purpose PowerShell backdoor […]

WaterPlum compromises 30,000 devices through fake interviews

North Korean cyber operators posing as recruiters have compromised at least 30,000 devices in more than 100 countries, using fraudulent job interviews to infect technology professionals and steal cryptocurrency, authorities from four countries have disclosed. The campaign, attributed to a group tracked as WaterPlum and widely known as Contagious Interview, targeted web designers, software engineers, freelancers and specialists in cryptocurrency, blockchain and Web3 technologies between about December […]

Researchers penetrate OpenAI systems with Claude models

Security researchers participating in OpenAI’s bug bounty programme penetrated employee accounts and reached the company’s private GitHub monorepo after using Anthropic’s Claude models to develop an exploit chain. The July operation was carried out by three researchers at cybersecurity start-up Hacktron AI, who said they combined a vulnerability in software used by OpenAI’s community forum with a flaw in the company’s single sign-on configuration. OpenAI later fixed […]

AI agent orchestrates multistage personal-data breach in Spain

Spain’s data protection authority has disclosed its first notified personal-data breach in which an artificial intelligence agent allegedly carried out several stages of an intrusion, including vulnerability discovery, data modification and access to billing records. The Agencia Española de Protección de Datos said the incident involved an agent using a known large language model and marked a significant shift in the operational use of AI in cyberattacks. […]

CrowdSec traces repository theft to TanStack compromise

CrowdSec has said a supply-chain attack involving compromised TanStack npm packages led to the unauthorised copying of about 170 private GitHub repositories after credentials linked to a departing employee were exposed. The cybersecurity company said its investigation, completed with assistance from GitHub, traced the breach to an OAuth token obtained after the employee’s account was compromised in the May TanStack attack. The repositories were downloaded on May […]

RatHat malware harnesses AI to target banking data

Cybersecurity researchers have identified a new Android malware strain that uses generative artificial intelligence to help attackers navigate infected devices and steal banking credentials, payment information and authentication codes. Zimperium’s zLabs team disclosed the malware, named RatHat, on September 16, saying its technical indicators point to threat actors who appear to be operating from China. The researchers stopped short of definitively attributing the campaign, basing the assessment […]

Blockstream rebuffs ransom demand after Liquid bitcoin breach

Blockstream has refused to pay a ransom for nearly 600 bitcoin still controlled by the actors behind the $320 million exploit of its Liquid Network, saying it will pursue recovery through law enforcement, exchanges and forensic specialists if the funds are not returned. The Bitcoin infrastructure company said on September 11 that it had engaged with those responsible in an effort to recover user assets but would […]