News related to
theft

The US National Institute of Standards and Technology has finalised new guidance aimed at reducing theft, forgery and misuse of digital tokens that underpin single sign-on, cloud federation and API access. NIST Interagency Report 8587, released on September 15, sets out implementation recommendations for federal agencies and cloud service providers handling identity tokens, access tokens and assertions. The document focuses on how organisations should protect signing keys, […]

President Donald Trump has rejected calls for tougher artificial intelligence safeguards, arguing that existing US powers are sufficient even as security specialists warn that faster AI systems are widening the attack surface for cryptocurrency platforms and decentralised finance. Trump said on September 14 that additional safeguards were unnecessary and dismissed warnings from technology executives about uncontrolled development. His position places the White House at odds with industry […]

Swiss Bitcoin Pay has taken its servers offline after detecting what it described as likely unauthorised access to internal systems, while warning that customer contact, banking and transaction data may have been exposed. The Switzerland-based Bitcoin payments provider disclosed the incident on September 14 and said it was investigating the intrusion and securing its infrastructure before restoring service. It has not announced a date for reopening. Swiss […]

A skilled human attacker exploited a critical Marimo notebook flaw and moved from an exposed WebSocket session to authenticated access on an SSH bastion host in eight seconds, Sysdig’s Threat Research Team has documented. The operation centred on CVE-2026-39987, a pre-authentication remote code execution vulnerability affecting the Marimo Python notebook platform. Sysdig said the attacker used a hand-built Python toolkit rather than an AI agent, chaining initial […]

Cybersecurity stocks jumped on Wall Street on Monday as warnings over the pace and control of increasingly autonomous artificial intelligence systems drove investors away from semiconductor shares and towards companies expected to benefit from heavier spending on digital defence. CrowdStrike closed about 13.9% higher and Palo Alto Networks gained roughly 13.1%, placing both among the strongest performers in the S&P 500. Intraday gains approached 15% for CrowdStrike […]

A phishing campaign active since June is abusing Microsoft’s legitimate mshta. exe utility to run malicious HTML Application files, profile infected Windows systems and deliver follow-on malware capable of stealing credentials and other local secrets, security researchers have found. Fortra Intelligence and Research Experts, known as FIRE, said the operation remains active and is primarily targeting Spanish-speaking users at global organisations. The attackers use Spanish-language invoice and […]

Revolut has disclosed that a limited number of customers had sensitive personal and financial information exposed after the fintech company responded to fraudulent requests sent from an unauthorised account operating within a legitimate government agency’s email domain. The company said the requests appeared authentic because they came from an official government domain and carried valid domain authentication credentials. Revolut later determined that the email account had been […]

Advertisements

Blockstream has rejected a demand to surrender part of the bitcoin still held after the $320 million Liquid Network exploit, saying it will not pay a ransom and will pursue lawful recovery of the remaining funds. The company said on September 11 that taking assets without authorisation and withholding their return constituted theft rather than responsible security disclosure. It warned that, unless the outstanding bitcoin was returned, […]

China-linked threat actors have been caught chaining two Google Chrome flaws with a Windows kernel vulnerability to compromise selected targets, including non-governmental organisations, in espionage campaigns detected this month. Cybersecurity firm Volexity said the activity involved two separate groups it tracks as UTA0560 and JungleBamboo, the latter also known as APT31, Violet Typhoon and TA412. Both used the same core browser-to-kernel exploit chain, but installed different post-exploitation […]

Cisco has warned that attackers are actively exploiting two vulnerabilities in its Secure Firewall Management Center software, with intrusions leading to root-level access, credential theft, reconnaissance and malware deployment on compromised systems. Cisco Talos said on September 9 that it had identified three clusters of post-compromise activity involving CVE-2026-20079 and CVE-2026-20316. The first flaw, rated a maximum 10.0 on the CVSS scale, can let an unauthenticated remote […]

Cybercriminals are distributing fake Grand Theft Auto VI downloads that install remote-access trojans, an information stealer and destructive ransomware, putting gamers’ passwords, Discord accounts and cryptocurrency data at risk. Cybersecurity firm Huntress said it identified malicious optical-disc image files masquerading as leaked copies of Rockstar Games’ forthcoming title across search results, gaming forums, social media and torrent sites. Some files exceed 100GB, but researchers found much of […]

The US Treasury has sanctioned Xinbi Guarantee, a Chinese-language illicit marketplace accused of connecting Southeast Asian scam centres and transnational crime groups with money launderers, technology providers and other criminal-service vendors. The Office of Foreign Assets Control designated Xinbi Guarantee on September 9 as a significant transnational criminal organisation, while also sanctioning Singapore-based SafeW Technology Co Ltd and Cambodia-based Anwen Technology Co Ltd for providing technological and […]

Malone Lam, a 22-year-old Singapore citizen and former Miami resident, has pleaded guilty in Washington to leading an international cybercrime enterprise that stole and laundered cryptocurrency worth more than $245 million.

Lam admitted one count of participating in a racketeering conspiracy before US District Judge Colleen Kollar-Kotelly on Tuesday, September 8. Prosecutors said he organised a network that targeted cryptocurrency holders through social engineering scams, online intrusions and, on some occasions, break-ins at victims’ homes.

The US Attorney’s Office for the District of Columbia said the criminal enterprise operated from at least October 2023 until May 2025 and included participants based in California, Connecticut, New York, Florida and overseas. Lam, who also used several online aliases, identified targets and coordinated roles among members of the group.

One of the organisation’s largest thefts occurred in August 2024, when Lam and associates obtained more than 4,100 bitcoin from a victim in Washington. Court records say conspirators impersonated representatives of trusted companies, including Google and cryptocurrency exchange Gemini, and persuaded the victim to provide access information and authentication codes.

Those details allowed the group to gain control of the victim’s cryptocurrency holdings and transfer the bitcoin. Prosecutors have placed the value of that theft at more than $245 million for the purposes of the case, while earlier court filings valued the same 4,100 bitcoin at about $263 million at the time of the alleged transaction.

The broader racketeering case involves 18 defendants, with Lam becoming the 11th to plead guilty. Prosecutors described him as an organiser who played several roles in the enterprise and directed associates involved in obtaining credentials, moving stolen assets and laundering cryptocurrency through exchanges and other channels.

The plea marks a step in the prosecution of a network that authorities say grew out of contacts made through online gaming communities. Investigators allege members specialised in different parts of the operation, including identifying wealthy holders, impersonating corporate security staff, gaining account access and converting stolen cryptocurrency into cash or goods.

Federal authorities have pursued the case under the Racketeer Influenced and Corrupt Organizations Act, a statute more commonly associated with organised criminal enterprises. The charge allows prosecutors to treat coordinated fraud, laundering and related acts as part of one conspiracy rather than as isolated offences.

Court documents also describe occasional home invasions or break-ins used to obtain information from cryptocurrency holders. The Justice Department said the group combined those physical intrusions with deceptive calls and other social engineering methods designed to gain passwords, seed phrases, security codes and related information needed to access digital wallets.

The stolen proceeds financed extensive spending by members of the group. Authorities said the conspiracy paid for private jets, rental properties in Miami, Los Angeles and the Hamptons, luxury clothing, handbags, watches, private security and a fleet of exotic cars. Some vehicles were valued at as much as $3.8 million.

Nightclub spending was another major outlet for the proceeds. Court records cited services costing as much as $500,000 per evening, while Lam was linked to a $569,000 bill during one night at a Los Angeles club. Luxury watches purchased by members of the group were valued from about $100,000 to more than $500,000.

Lam was arrested in Miami after the August 2024 bitcoin theft. The guilty plea followed months of negotiations over whether he would accept an agreement or proceed to trial. Several alleged co-conspirators had indicated they were prepared to testify if the case went before a jury.

At the plea hearing, Lam acknowledged the prosecution’s account and entered his guilty plea to the RICO conspiracy charge. The offence carries a maximum prison term of 20 years, although the sentence will be determined later under federal law and sentencing guidelines.

Judge Kollar-Kotelly scheduled a status hearing for December 8, when the court is expected to address the next steps towards sentencing. Lam and other participants have also been ordered to repay more than $245 million in stolen funds to victims.

Coin Center research director Laz Pieper has called for a shift away from identity-verification systems that routinely collect and retain full copies of personal documents, arguing that privacy-preserving technology could reduce the large stores of sensitive data now targeted by cybercriminals. The warning follows an FBI investigation into claims that a dark-web service offered access to more than 153 million US and Canadian driver’s-licence records, along with […]

Cybercriminals are combining fake Google CAPTCHA prompts, WebDAV-hosted DLLs, malicious Cloudflare Workers and BNB Smart Chain contracts in a multi-stage operation that deploys the Amatera information stealer and other payloads, according to new research from Cisco Talos. The investigation began after Talos identified unusual endpoint activity at a Ukrainian government organisation in April 2026. A remote file disguised as “verification. google” was executed from a WebDAV path […]

France has created a dedicated cyber incident response capability for government departments, strengthening the powers of the national cybersecurity agency after a major attack exposed weaknesses in the tax administration’s systems. The new mechanism, called REACTIV — short for Réponse & Action Interministérielle face aux Violations de données — was announced by the National Agency for the Security of Information Systems, or ANSSI, after Prime Minister Sébastien […]

Used-car marketplace CARS24 has complained to cybercrime police that confidential information linked to about 3,100 customers was unlawfully taken and passed to a competing business and outside vehicle dealers, with individual sales leads allegedly offered for roughly ₹1,000 each. The company has estimated the resulting commercial loss at about ₹5.70 crore, according to details of the complaint. The figure is CARS24’s assessment of business damage and should […]

A Russian state-linked cyber-espionage group has deployed a newly documented Windows backdoor, HOOKEDGE, against government, diplomatic and defence-related organisations in Romania, Spain and Türkiye, according to threat intelligence published in late August. Researchers at Recorded Future’s Insikt Group said the activity ran from late September 2025 to early April 2026 and was attributed with moderate confidence to BlueDelta, a cluster that overlaps with APT28, Fancy Bear and […]

Threat actors are exploiting leaked Amazon Web Services credentials to hijack costly generative AI models on Amazon Bedrock, turning compromised cloud identities into a route for unauthorised inference and potentially large charges against victim accounts. FortiGuard Labs disclosed on September 3 that it had analysed an AWS account compromise involving a long-lived Identity and Access Management access key carrying AdministratorAccess permissions. The stolen credential was used to […]

Regional headlines have raised questions about cleaner vetting, hiring requirements and professional cleaning standards. Kleaner’s 100,000-hour milestone is underpinned by a model designed to address these concerns through trained personnel, oversight and consistent service protocols.

KUALA LUMPUR, MALAYSIA – Media OutReach Newswire – 4 September 2026 – Kleaner, a professional home and office cleaning provider operating across Kuala Lumpur and the wider Klang Valley, has surpassed 100,000 hours of residential and commercial cleaning. The milestone comes amid renewed regional attention on the safeguards, qualifications and oversight surrounding cleaning roles.

Kleaner Surpasses 100,000 Hours in Malaysia as Headlines Spotlight Cleaner Trust & Hiring

Scaling Professional Cleaning Standards in Malaysia

As informal home-service hiring draws scrutiny, Malaysian authorities have encouraged consumers to use verified, accountable providers. Kleaner addresses these concerns through a digital-first service across Kuala Lumpur, Petaling Jaya and the Klang Valley, backed by vetted personnel, documented bookings and an Anti-Theft Policy. The equivalent of more than 11 years of round-the-clock cleaning has been delivered under this model, where screening, traceability and accountability remain central to service delivery.

Confronting Gaps Between Qualifications and Skills

Malaysia’s labor market continues to face a mismatch between qualifications and available work. Government data recorded 1.93 million people in skill-related underemployment in the first quarter of 2026, accounting for 35.2 percent of employed tertiary-educated workers. A Singapore cleaning vacancy offering Malaysians up to RM13,000 while requiring a university degree further highlighted the disconnect between credentials and actual job demands. National Training Week 2026 reflects a push toward practical, job-relevant skills development and clearer employment pathways.

Kleaner’s employment model supports this direction through training, conduct and performance. Its cleaners are given clear responsibilities, fair pay arrangements and a recognized professional role within the company. This supports workforce stability, service continuity and consistent expectations across residential and commercial assignments, while giving staff ownership of service quality and conduct.

Kleaner extends the same accountability to customers through transparent pricing and a Satisfaction Guarantee. By linking workforce recognition with customer safeguards, the company continues to strengthen reliability across its home and office cleaning services.
Hashtag: #Kleaner

The issuer is solely responsible for the content of this announcement.

About Kleaner

Kleaner is a digital-first cleaning services provider serving homes and businesses across Kuala Lumpur, Petaling Jaya and the wider Klang Valley. Its services are delivered by vetted cleaners and supported by an Anti-Theft Policy and a Satisfaction Guarantee. For more information, visit:

A Russian national accused of helping infect about 80,000 freelance workers with malware has been extradited to the United States and placed in federal custody after appearing in court in San Francisco. Searzhudin Tamirlanovich Aktulaev, 40, was arrested in Cyprus in May 2025 and extradited on August 28, 2026, the US Department of Justice said. He made his initial appearance in federal court on August 31, where […]

Nutex Health has confirmed that an unauthorised third party stole sensitive patient, employee, provider, business and financial information from its computer network and threatened to publish the data externally. The Houston-based healthcare provider disclosed the findings in an August 31 filing with the US Securities and Exchange Commission, upgrading its earlier notification of the intrusion to a report under the regulator’s category for material cybersecurity incidents. The […]

A six-member gang stole more than 100kg of frozen chicken from a moving refrigerated truck on a highway outside Cairo before a police operation ended with three suspects killed and three others arrested. The robbery took place on August 25 on the Cairo-Ismailia Desert Road, within the jurisdiction of Al-Shorouk in eastern Cairo. Video of the operation, filmed from another vehicle, spread rapidly online after showing the […]

A Tehran-based cybersecurity academy sanctioned by Washington is recruiting hundreds of young people for its largest training programme, renewing scrutiny of Iran’s expanding pool of cyber specialists and their potential links to state-backed hacking operations. Ravin Academy is seeking between 600 and 1,200 Iranians aged 17 to 30 for a free, year-long cybersecurity scholarship programme. The initiative represents a substantial expansion for an organisation that US authorities […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA