access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email endpoint exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Anthropic ‘SneakPeek’ Flaw Is a Silent Zero-Click Threat
A bug in Claude Code Desktop’s preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/new-anthropic-sneakpeek-silent-zero-click-threat also interesting: SonicWall VPNs face a breach of their own after the September cloud-backup fallout From Firewalls to Zero Trust:…
-
Who Pays When the AI Tiger Gets Loose?
Autonomous Agents Raise Liability Questions Frontier Labs Can No Longer Ignore Frontier AI companies want autonomous agents powerful enough to transform business, but unpredictable enough to distance developers from the damage. As agents escape safeguards and probe outside systems, an old legal principle may provide the answer: Don’t forget to lock your tiger’s cage. First…
-
Microsoft Takes Down Massive Chinese Phishing Marketplace
Tags: china, cybercrime, healthcare, infrastructure, malicious, marketplace, microsoft, network, phishing, serviceChinese-Language Phishing Services Sent 1 Billion Malicious Messages in 2026. A network of major Chinese-language phishing sites used by cybercriminals to impersonate tens of thousands of global corporations had their infrastructure seized following a U.S. court order sought by Microsoft and healthcare organization Health-ISAC. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/microsoft-takes-down-massive-chinese-phishing-marketplace-a-33107 also interesting: 7…
-
Private Instagram Downloaders Are Parsers, Not Privacy Bypass Tools
Disclosure: This article was produced in partnership with FastDL. Hackread.com reviewed and edited the content before publication. “SaveVid.Net… First seen on hackread.com Jump to article: hackread.com/private-instagram-downloaders-parsers-privacy-bypass-tools/ also interesting: Privacy Roundup: Week 3 of Year 2025 Opening Up Open Banking: The CFPB’s Personal Financial Data Rights Rule Security for AI: A Practical Guide to Enforcing Your…
-
Flock CEO: We haven’t ‘fired’ any police departments as customers
Flock CEO Garrett Langley said that the surveillance company has not canceled contracts of any police department or law enforcement agency, despite reports of abuse. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/14/flock-ceo-we-havent-fired-any-police-departments-as-customers/ also interesting: Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity International effort erases PlugX malware from thousands of Windows…
-
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains. First seen on therecord.media Jump to article: therecord.media/brooklyn-da-server-takedowns-crypto-scam-russian-speakers also interesting: Brooklyn DA’s office disrupts crypto scam targeting Russian community Brooklyn DA’s office disrupts crypto scam targeting Russian…
-
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains. First seen on therecord.media Jump to article: therecord.media/brooklyn-da-server-takedowns-crypto-scam-russian-speakers also interesting: Brooklyn DA’s office disrupts crypto scam targeting Russian community Brooklyn DA’s office disrupts crypto scam targeting Russian…
-
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to an operation to take down the associated servers and domains. First seen on therecord.media Jump to article: therecord.media/brooklyn-da-server-takedowns-crypto-scam-russian-speakers also interesting: Brooklyn DA’s office disrupts crypto scam targeting Russian community Brooklyn DA’s office disrupts crypto scam targeting Russian…
-
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System.”Since January 2026, the threat actors behind these kits have…
-
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.A web shell is a small file that executes any command an attacker sends via a web request, with…
-
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system, Cisco said in an advisory on Wednesday.The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could then run commands as root. The appliance…
-
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group’s operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ also interesting: North Korean APT45 Goes for the Money APT Group 123 Targets…
-
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group’s operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/ also interesting: North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack…
-
Anthropic Seeks Full Appeals Court Review of Pentagon Ban
Tags: defenseRequest for 11-Judge Review Could Set Stage for Supreme Court Challenge. Anthropic filed an anticipated appeal in its ongoing fight against a blacklisting by the U.S. Department of Defense, arguing that the case’s far-reaching implications demand a larger panel of judges to decide. A request for an en banc hearing is an expected stage in…
-
Certes wins Frost Sullivan PQC recognition for decoupling encryption from infrastructure
Certes has received Frost & Sullivan’s 2026 Global Enabling Technology Leadership Recognition in post-quantum cryptography (PQC), following an independent evaluation of vendors in the market. The recognition centres on a problem most security teams are now facing: migrating embedded cryptography across legacy applications, cloud environments and critical infrastructure will take years, but “harvest now, decrypt…
-
Vega Appoints Category Builder Scott Simkin as Chief Marketing Officer to Define the Post-SIEM Era
Vega, the pioneer of Agentic Cyber Defense, today announced the appointment of Scott Simkin as Chief Marketing Officer. Simkin joins as Vega II unleashes the best model trained for cyber defense to transform every alert, across all data sources, into a conclusive verdict at the speed of the attack. The platform keeps every lesson and…
-
Zero Trust in Practice: Moving Beyond the Buzzword
Zero trust has become one of the most overused terms in security marketing, often applied to products that simply add another layer of network segmentation. This piece looks at what zero trust actually specifies according to its foundational standard, the implementation order that works in practice, and why identity is the dependency most organizations underestimate.…
-
Fake WatchGuard VPN site steals credentials, then serves the genuine signed client
Huntress researchers have uncovered an SEO-poisoning campaign that harvests SSL VPN credentials through a lookalike WatchGuard download page, then hands victims the real, validly signed installer from WatchGuard’s own CDN, leaving endpoint tools with nothing to detect. The activity, detailed by the Huntress SOC on 13 October, centres on watchguard-vpn[.]net, a lookalike domain posing as…
-
Nearly Half of Organisations Report Unauthorised AI Agent Actions, Research Finds
Nearly half (49.8%) of organisations have confirmed or suspected that an AI agent took an unintended, unexpected or unauthorised action in the past year, according to new research from Salt Security. The findings, published in the company’s State of Agentic AI and API Security 2H 2026 report, highlight growing concerns around the security of autonomous…
-
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/14/apate-sends-ai-agents-undercover-to-get-scammed-so-they-can-gather-fraud-intelligence/ also interesting: AI Edtech Startup Founder Indicted in U.S. Fraud Case Threat Intelligence’s Top Players Tackle Evolving Cyber Risk Cybersecurity Snapshot: NIST Offers Zero Trust Implementation Advice,…
-
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/ also interesting: Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances Cisco fixes critical IMC auth bypass present in…
-
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ledger-asks-sellers-across-asia-to-halt-sales-after-supply-chain-attack/ also interesting: Starbucks, grocery stores impacted by Blue Yonder ransomware attack How AI…
-
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities
In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vulnerabilities affect Windows. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-patch-tuesday-october-2026/ also interesting: Microsoft Patches Zero-Day Exploited by QakBot March 2025 Patch Tuesday: Microsoft Fixes 57 Vulnerabilities, 7 Zero-Days Microsoft Patches…
-
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers as part of its ongoing efforts to disrupt North Korea’s fraudulent remote IT worker (ITW) scheme.The indictment charges a mix of U.S. citizens and Chinese nationals for their roles in an IT worker conspiracy affecting more than 70 U.S.…
-
Bank of America hit with £1.2bn fine after money laundering probe
Bank of America has been fined £1.2bn for its failings related to anti-money laundering First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651843/Bank-of-America-hit-with-12bn-fine-after-money-laundering-probe also interesting: Triangulation fraud: The costly scam hitting online retailers Bank of America Customers at Risk After Data Breach Ransomware attacks: The evolving extortion threat to US financial institutions MuddyWater APT Targets CFOs…
-
Spyware manufacturer had access to data harvested by former Polish government, current PM says
Prime Minister Donald Tusk, who ordered the investigation, on Monday called the sprawling spyware operation spearheaded by the country’s previous ruling party “one of the biggest scandals in Polish history since the fall of communism.” First seen on therecord.media Jump to article: therecord.media/spyware-manufacturer-had-access-to-data-harvested-by-previous-polish-government also interesting: The espionage reality: Your infrastructure is already in the collection…
-
Hacker targets Ivanti Connect Secure in chained exploitation
Researchers warn the attacker is taking multiple steps to clean up forensic evidence after an attack.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/hacker-ivanti-connect-secure-chained-exploitation/832983/ also interesting: Hackers still exploiting older Ivanti bugs to breach networks CISA Warns SolarWinds and Ivanti Vulnerabilities Are Actively Exploited Breach Roundup: German Police Expose REvil, GandCrab Boss Hackers Chain 3…
-
Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack
Microsoft’s October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including an exploited Windows zero-day and critical Outlook security flaws. The post Microsoft Patch Tuesday Fixes 1,413 Flaws: Windows Zero-Day Already Under Attack appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-october-2026-patch-tuesday/ also interesting: Microsoft’s May 2025 Patch Tuesday Addresses 71 CVEs (CVE-2025-32701, CVE-2025-32706,…
-
Löschung inaktiver Konten: Paypal-Warnhinweis verwirrt Nutzer
Paypal-Nutzer erhalten derzeit Hinweise über die Löschung eines inaktiven Kontos. Das ist zwar kein Phishing, aber gerade deshalb verwirrend. First seen on golem.de Jump to article: www.golem.de/news/loeschung-inaktiver-konten-paypal-benachrichtigung-verwirrt-nutzer-2610-214115.html also interesting: NetBird malware spread in advanced finance exec-targeted spear-phishing Hackers Launch 2,000+ Fake Holiday Shops in Massive Payment Theft Scheme Google Sues Chinese Phishing Service Over Gemini…
-
Gegen Anthropic und OpenAI: EU leitet offizielles Verfahren wegen Hugging-Face-Hack ein
Tags: openaiWeil die freiwillig eingereichten Auskünfte von Anthropic und OpenAI unzureichend waren, ermittelt die EU-Kommission nun offiziell. First seen on golem.de Jump to article: www.golem.de/news/gegen-anthropic-und-openai-eu-leitet-offizielles-verfahren-wegen-hugging-face-hack-ein-2610-214116.html also interesting: New IBM Security Services Aim to Counter Risks of Frontier AI Models OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers OpenAI Agents Coordinated Hugging Face Breach…
-
Senators press Trump admin to rally federal government around AI safety, security
The letter argues federal agencies should more rigorously test AI models for security threats and sandbox evasion, set new safety standards and lean into defensive AI. First seen on cyberscoop.com Jump to article: cyberscoop.com/congress-presses-trump-administration-ai-safety-cybersecurity/ also interesting: What is AI fuzzing? And what tools, threats and challenges generative AI brings Insider risk in an age of…
-
Ahold Delhaize USA banners remain offline
The websites and apps for the five chains have been down for several days as the parent company contends with a cybersecurity incident. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ahold-delhaize-usa-sites-still-down/832972/ also interesting: Cyberangriff auf einen Anbieter von Software für das Lieferkettenmanagement aus den USA Sophos MSP-Umfrage: Mangel an Cybersecurity-Fachkräften ist die größte Herausforderung Cybersecurity…
-
Microsoft, Health-ISAC and partners take down popular phishing kit services
The three marketplaces helped hackers impersonate major businesses and governments. Microsoft now controls the markets’ domain names. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/phishing-marketplace-takedown-microsoft-health-isac/832965/ also interesting: The most notorious and damaging ransomware of all time Privacy Roundup: Week 11 of Year 2025 Cybersecurity Snapshot: Tenable Report Spotlights Cloud Exposures, as Google Catches Pro-Russia Hackers…
-
Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests
The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking schemes. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/north-korea-it-worker-raids-arrests-charges/832968/ also interesting: New PondRAT Malware Hidden in Python Packages Targets Software Developers North Korean Hackers Stolen $2.2 Billion from Crypto Platforms in 2024 Lazarus Group Exploits Trusted Apps for Data Theft via…
-
Gartner-Umfrage – 41 Prozent der CISOs melden Deepfake-Vorfälle bei Audioanrufen
First seen on security-insider.de Jump to article: www.security-insider.de/gartner-umfrage-deepfake-audio-video-social-engineering-a-3a7c996a05ca7ff1a11401bbf43432ba/ also interesting: Passwortlose Authentifizierung wird für CISOs immer wichtiger 10 promising cybersecurity startups CISOs should know about CISOs’ top 10 cybersecurity priorities for 2026 12 cyber industry trends revealed at RSAC 2026
-
ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads
Tags: malwarege-item”> ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/romulus-malware-clickfix-deliver/ also interesting: Swiss Cyber Agency Warns of QR Code Malware in Mail Scam Malware Exploit Bypasses SEGs Leaving Organizations at Risk Microsoft Warns: 1 Million Devices Infected by Malware from GitHub Mac Malware Found Draining Crypto Wallets…
-
Ransomware Gangs Threaten Employees’ Families as AI-Powered Attacks Escalate
Ransomware operators are extending their extortion tactics beyond corporate networks by threatening employees’ families and using artificial intelligence to enhance their attacks, according to the Semperis 2026 Ransomware Risk Report. Among the surveyed victims, 37% reported threats against their family members or friends, while 84% experienced attacks that involved AI in some form. The findings…
-
The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure validation and breach simulation can help close these gaps. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/the-blind-spots-of-agentic-pentesting-and-how-to-close-them/ also interesting: China-linked hackers target Japan’s national security and…
-
Microsoft fixes VPN issues caused by September Windows updates
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-fixes-vpn-issues-caused-by-september-windows-updates/ also interesting: Microsoft says April Windows updates break VPN connections Privacy Roundup: Week 7 of Year 2025 Operation Epic Fury: Why exposure data changes everything…
-
Saudi Man Bugged OpenAI, Used Chatbot to Plan Inept Op
FBI Arrests Engineer at Firm Tied to Bugging of an Executive Conference Room. A 35-year-old Saudi engineer employed by artificial intelligence powerhouse OpenAI at its San Francisco headquarters has been charged with bugging an executive conference room. The company said its investigating but as yet found no signs that sensitive data or AI model information…
-
Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates
Microsoft Patch Tuesday security updates for October 2026 address a record 1,415 vulnerabilities. Prioritize the exploited zero-day, critical bugs and potentially wormable vulnerabilities. Microsoft just shattered every patch record in the book. October 2026 brought us a staggering 1,415 new CVEs from Microsoft alone. >>Well, it’s a new record release from Microsoft, again. This is…
-
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Tags: governmentTalos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/break-the-silence-kazakhstan-nexus-uat-6275-targets-cis-government-organizations/ also interesting: Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access Iranian hackers use CHOSEN BRICK Windows malware to spy…
-
Russian Influence Operation Widely Targeting Latin America
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-influence-operation-targeting-latin-america also interesting: New ransomware group Funksec is quickly gaining traction The dirty dozen: 12 worst ransomware groups active today Rogues gallery:…
-
BEC-Angriffe: Wenn Cyberkriminelle die digitale Realität im Unternehmen manipulieren
Neue BEC-Angriffe manipulieren E-Mails, Kalender und Dokumente. Warum klassische Phishing-Abwehr nicht mehr ausreicht und Unternehmen umdenken müssen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/bec-angriffe-wenn-cyberkriminelle-die-digitale-realitaet-im-unternehmen-manipulieren/a46757/ also interesting: Void Blizzard nimmt NATO-Organisationen ins Visier Microsoft-Lücke ermöglicht E-Mail-Versand ohne Authentifizierung Junge Onliner tappen oft in Phishing-Fallen Was tun, wenn die Erpresser kommen?
-
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-day/ also interesting: The 2024 cyberwar playbook: Tricks used by nation-state actors Cisco Firewall and VPN Zero Day Attacks:…
-
Global takedown hits network behind 1 billion phishing messages
A massive cybercriminal ecosystem facilitating more than a billion malicious messages targeting over 75,000 organizations across 150 countries has been disrupted by law enforcement agencies and partners worldwide. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/global-takedown-hits-network-behind-1-billion-phishing-messages/ also interesting: The dirty dozen: 12 worst ransomware groups active today The most notorious and damaging ransomware of all…
-
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries
North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept company-issued … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/14/north-korean-it-workers-laptop-farms-arrests/ also interesting: North Korean fake IT workers up the ante in targeting tech firms The most notorious and damaging…
-
Microsoft Fixes Record 1,413 CVEs in October Patch Tuesday
Microsoft’s October 2026 Patch Tuesday fixes 1,413 Microsoft CVEs. That is a new record, set only one month after September’s previous high of 974, and it represents a jump of roughly 45%. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/october-2026-patch-tuesday/ also interesting: 5 CVEs in Microsoft’s October Update to Patch Immediately Microsoft patches two actively…
-
SAP Patches Critical CVSS 10.0 Flaw in Cloud SDK for Python
SAP released its October 2026 security patch on Tuesday, October 13, delivering 22 new and updated security notes. Four of them address critical-severity vulnerabilities. The most severe is CVE-2026-89111, a maximum-rated flaw in the Cloud SDK for Python. Several of the bugs could allow attackers to invoke internal operations or execute code, which could lead…
-
Justice Department says North Koreans have infiltrated dozens of US companies
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies and Pyongyang. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/ also interesting: FBI: North Korean hackers targeting cryptocurrency employees US removes sanctions against Tornado Cash crypto mixer North Korean Lazarus Group Expands Ransomware Activity With Medusa Drift…