News related to
theft

Atlassian has fixed a security flaw in its Rovo artificial intelligence assistant that could have allowed attackers to turn a single malicious link into a channel for stealing sensitive corporate information from services accessible to a logged-in employee. The vulnerability, dubbed RovoBlast, exploited the way Rovo Chat processed externally supplied information embedded in URLs. An attacker could construct a link containing malicious instructions and persuade an authenticated […]

A coordinated campaign involving 77 counterfeit extensions on the Open VSX Registry exposed sensitive information about developer machines, Git repositories and continuous integration environments, highlighting a growing software supply-chain risk around code-editor plugins. The extensions appeared between July 26 and August 1 and impersonated legitimate tools available through the Visual Studio Code ecosystem. All 77 had been removed from Open VSX by August 3, but security specialists […]

A Windows Hello for Business authentication technique can allow malware operating inside an unlocked Windows session to gain access to Microsoft Entra ID services without obtaining the user’s password, PIN or biometric data. Security researcher Dirk-jan Mollema demonstrated that an attacker who already controls a user process can invoke the cryptographic key underpinning Windows Hello for Business, or WHFB, and use it to generate authentication signatures. The […]

A Canadian hacker has pleaded guilty to taking part in a sweeping cybercrime operation that compromised accounts belonging to more than 165 organisations using cloud data platform Snowflake, exposing sensitive information belonging to at least 100 million people. Connor Riley Moucka, 26, of Kitchener, Ontario, admitted computer fraud, wire fraud, aggravated identity theft and conspiracy in federal court in Washington state. He is scheduled to be sentenced […]

A volunteer security group has flagged 85 potentially critical vulnerabilities across hundreds of Bitcoin-related software projects, exposing the scale of weaknesses that artificial intelligence can identify faster than developers can verify or repair them. The Bitcoin Red Team recorded 4,962 security findings after running advanced AI models against 390 open-source repositories during an intensive audit spanning about 27.5 hours on August 4 and 5. The findings included […]

Ransomware operators are using Ethereum smart contracts to conceal command-and-control addresses, giving malware a resilient way to locate attacker-controlled servers even after defenders block known domains. The technique has been linked to an affiliate of The Gentlemen ransomware operation, which deployed a Node. js backdoor known as EtherRAT during intrusions targeting Windows networks. Instead of storing a fixed command server inside the malware, EtherRAT reads a smart […]

Chinese optical-component shares fell sharply on Wednesday after reports that Washington is preparing restrictions on data-centre equipment from China, raising fresh concerns over access to the world’s largest artificial intelligence infrastructure market.

Zhongji Innolight dropped about 10% in both Shanghai and Hong Kong, while Eoptolink Technology also lost 10%. Suzhou TFC Optical Communication declined roughly 6%. The CSI 300 Telecommunication Services Index fell as much as 9% during early trading before trimming some losses.

The sell-off followed disclosures that the administration of US President Donald Trump is drafting a measure that would bar imports of new Chinese optical transceiver models on national security grounds. The Federal Communications Commission is working on the proposed restrictions and is seeking to publish them before the end of the year.

No final decision has been announced, and the proposed rules could be altered, delayed or abandoned. Neither the White House nor the FCC has publicly detailed the measure.

Optical transceivers are essential components in modern data centres. They convert electrical signals into light and allow vast volumes of information to move at high speed through fibre-optic cables connecting servers, switches and computing clusters.

Demand for the devices has surged as technology groups build larger facilities for training and operating artificial intelligence models. These systems require thousands of advanced processors to communicate rapidly, making optical networking a critical part of the AI supply chain.

Chinese manufacturers have secured a substantial position in the global market by combining high-volume production with competitive pricing. Zhongji Innolight holds an estimated 27% share of the global data-centre transceiver market and is among the leading suppliers of high-speed products used in AI computing systems.

The company derived 62% of its revenue from the United States during the first quarter of 2026. It has previously warned that an escalation in trade tensions could produce a steep decline in earnings or lead to losses.

Eoptolink is similarly exposed, generating about 96% of its sales from overseas markets. TFC Optical also depends heavily on foreign customers, leaving all three companies vulnerable to any restriction affecting shipments to US cloud-computing operators.

The proposed action would mark a further expansion of Washington’s technology controls. Earlier measures concentrated mainly on preventing China from acquiring advanced semiconductors, chipmaking equipment and other technologies with potential military applications.

US policy is now extending towards limiting Chinese companies’ access to the domestic market. The FCC has already imposed or prepared restrictions covering telecommunications equipment, drones, routers, connected power inverters and advanced robots.

Under the plan being considered, the agency could initially prohibit imports of all new optical transceiver models and then grant exemptions to suppliers outside China. Existing devices may remain unaffected, although the scope of any final regulation has yet to be established.

US officials are concerned that foreign-made components embedded in data centres could enable data theft, malware installation or service disruption. Supporters of tighter controls argue that Washington should act before Chinese equipment becomes deeply integrated into critical AI infrastructure.

The approach reflects lessons drawn from Huawei, whose telecommunications equipment became widely installed before security restrictions were introduced. Removing or replacing those systems proved costly and complicated for network operators.

A ban would also create challenges for US cloud-computing companies. Amazon Web Services and other operators may have to shift orders to suppliers such as Coherent and Lumentum, potentially increasing procurement costs and slowing the expansion of data-centre capacity.

Shares of US optical-networking companies rose after details of the proposal emerged. Lumentum gained about 7%, Coherent climbed 11% and Applied Optoelectronics advanced 18%, as investors anticipated greater demand for non-Chinese products.

Industry specialists have cautioned that US suppliers may lack the manufacturing scale required to replace Chinese vendors quickly. Any abrupt change could tighten global supplies of high-speed transceivers at a time when technology groups are spending heavily on AI infrastructure.

Some market analysts also viewed Wednesday’s declines as excessive. They said the proposal could serve as a negotiating tool before an expected visit by Chinese President Xi Jinping to the United States in September.

Trade relations remain shaped by mutual dependence. Washington relies on China for rare-earth minerals used in electronics and optical systems, while Chinese technology companies depend on US customers, processors and specialised equipment.

Advertisements

A WhatsApp account takeover scam is spreading through messages that ask users to vote for a friend or relative in an online competition, before covertly linking the victim’s account to a device controlled by criminals. The attack often begins with a message from a familiar contact whose account has already been compromised. The recipient is asked to support someone participating in a dance contest, school competition, pet […]

Greenlogue/AP A UAE-led multinational operation has arrested 839 suspects and seized assets linked to environmental offences worth more than $280 million across the Amazon Basin, sharply expanding cross-border enforcement against illegal mining, logging and wildlife trafficking. Operation Green Shield 2026 brought together law enforcement agencies from Bolivia, Brazil, Colombia, Ecuador and Peru, with organisational leadership and coordination provided by the UAE through the International Initiative of Law […]

A newly identified malware operation has used a counterfeit Python component to bypass security scrutiny, disable parts of Microsoft Defender and establish persistent remote access inside a law firm’s network. The intrusion compromised two endpoints after employees received spear-phishing emails directing them to an encrypted archive hosted on the Mega file-sharing service. The archive contained a malicious Windows shortcut named “Case Documents”, designed to resemble material connected […]

Bitcoin’s largest holders have accumulated 19,610 coins since July 29, widening a sharp divide with smaller investors who reduced their exposure after a major security failure involving Coldcard hardware wallets. Wallets holding between 10 and 10,000 Bitcoin increased their combined balances by 0.14 per cent over the period. Addresses containing less than 0.01 Bitcoin cut their holdings by 0.55 per cent, indicating that retail investors were more […]

A critical flaw in Coldcard hardware wallets has enabled the theft of at least 594 bitcoin from hundreds of users, intensifying scrutiny of devices promoted as one of the safest ways to store digital assets. The stolen cryptocurrency was valued at about $38 million when the coordinated transactions occurred on July 31. Claims circulating on social media that the loss has exceeded $88 million could not be […]

Binance founder Changpeng Zhao has urged cryptocurrency holders to divide their assets among several wallets after attackers stole more than $70 million in bitcoin by exploiting weak recovery phrases generated by Coldcard hardware devices. Zhao, widely known as CZ, said even hardware wallets with long operating histories could contain software flaws. His warning marked a shift from the traditional advice to diversify cryptocurrency holdings, extending the principle […]

A flaw in seed generation allowed an attacker to steal more than 1,000 bitcoin from nearly 1,200 cold wallets without gaining physical or remote access to the hardware devices. The attacker drained 1,082.65 bitcoin, valued at about $70 million, from 1,196 wallet addresses on July 30. The transfers occurred between 01:10 and 01:51 UTC and were recorded across six Bitcoin blocks, making the operation one of the […]

LogoKit has evolved into a cloud-based phishing platform capable of constructing customised fake login pages for individual victims as soon as they click a malicious link. The kit uses a person’s email domain to identify their organisation, retrieve authentic branding and capture an image of the organisation’s genuine website. The material is then assembled into a convincing credential-harvesting page designed to resemble the victim’s familiar online environment. […]

Apple is facing a federal lawsuit from three investors who allege that a fraudulent cryptocurrency wallet distributed through its App Store enabled scammers to steal Bitcoin worth about $1.8 million. The complaint, filed on July 24 in the US District Court for the Northern District of California, accuses Apple of negligence, misrepresentation and failing to adequately review or monitor applications offered through its tightly controlled digital marketplace. […]

The Supreme Court has urged Parliament to create distinct criminal offences for “digital arrest” scams and artificial intelligence-generated deepfakes, warning that existing laws do not adequately address technology-enabled fraud that has cost citizens about ₹54,000 crore over six years. Solicitor General Tushar Mehta told a bench headed by Chief Justice Surya Kant that the Centre was preparing legislation covering digital arrests, deepfakes and related cyber offences. The […]

Three high-severity vulnerabilities in Hugging Face’s Diffusers library can allow malicious model repositories to execute arbitrary Python code even when users disable remote-code execution, exposing weaknesses in a key security control used across artificial intelligence development environments. The flaws affect Diffusers versions earlier than 0.38.0 and centre on the library’s trustremotecode safeguard. Developers rely on this setting to prevent unreviewed code bundled with models or pipelines from […]

Attackers are exploiting a critical vulnerability in Alibaba’s Fastjson library that can allow unauthenticated remote code execution on Java servers, raising urgent concerns for organisations running older versions of the widely deployed software component. The flaw, tracked as CVE-2026-16723, affects Fastjson 1. x installations under specific configurations and carries a severity score of 9.0 out of 10. Successful exploitation can give an attacker control of a vulnerable […]

Cybersecurity researchers have renewed warnings over SparkKitty, a cross-platform mobile Trojan that steals photographs from compromised Android and iOS devices and transfers them to attacker-controlled command servers. The malware targets images that may expose cryptocurrency wallet recovery phrases, passwords, identity documents, QR codes and financial information. Its ability to capture entire photo libraries also creates risks beyond digital-asset theft, including account takeover, identity fraud, surveillance and extortion. […]

Infostealer malware is giving ransomware operators a faster route into corporate networks by supplying stolen passwords, browser cookies and authentication tokens that can defeat conventional identity controls. The growing trade in “stealer logs” has turned infections on individual computers into a dependable source of access for organised cybercrime groups. Criminals can search the harvested data for corporate email addresses, virtual private network credentials, cloud accounts, remote desktop […]

Nearly 200 US startups have urged the Trump administration to reject sweeping restrictions on Chinese open-weight artificial intelligence models, warning that a broad ban would raise costs, weaken competition and threaten companies built around affordable access to advanced technology. The coordinated appeal was organised by the newly formed Little Tech Association and sent to President Donald Trump and senior administration officials, including Commerce Secretary Howard Lutnick and […]

Iran-linked cyber actors are targeting internet-connected industrial control systems used across US water, energy, manufacturing and public-service networks, prompting an expanded federal warning covering equipment made by Siemens, Schneider Electric and Rockwell Automation. The updated alert says attackers have gained access to programmable logic controllers, or PLCs, which manage physical processes inside critical infrastructure. Intruders have downloaded malicious project files, altered control logic and manipulated information shown […]

Craneware has disclosed a cyberattack that allowed an unauthorised party to extract employee information and records linked to customers and business partners, raising fresh concerns about technology supply-chain risks across the US healthcare sector. The Edinburgh-based healthcare software provider said attackers gained access to a limited section of its data environment. A significant volume of file names was viewed and removed, while an unspecified proportion of employee […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA