the most relevant news of the day, every weekday.
107 briefs
McKesson, one of the world's largest healthcare distributors, became the latest and gravest victim of the ShinyHunters extortion wave, disclosing a breach after the group claimed to have siphoned hundreds of millions of records — patient identifiers, medical details, even doctor-patient…
Australian police, working with the FBI, arrested two young men accused of running TeamPCP, the crew whose poisoned software updates rippled through thousands of build pipelines this spring and reached victims from the European Commission to GitHub and OpenAI — a rare arrest in one of the…
The Justice Department seized the QScan and QTRouter platforms that Chinese state hackers had used since 2018 to burrow into the Federal Reserve, NASA, the Senate, the Energy Department and federal health agencies — a proxy network stitched from thousands of hijacked routers and cameras…
Washington opened what the Treasury called an "economic D-Day" against Tehran, sanctioning five operatives tied to the Mabna Institute — the hacking-for-hire outfit US prosecutors say breached universities, government offices and the energy, healthcare and financial sectors for the…
The physical toll of state hacking mounted: Iran-linked hackers knocked a British power plant offline for four days — believed to be the first time Tehran's operatives have shut down a UK energy facility — in an attack that ran concurrently with the wave of intrusions into US water…
Five US agencies, the NSA, CISA, the FBI, the Energy Department and the EPA, warned this week that attackers are using AI-generated tooling disguised as legitimate monitoring software to map Siemens industrial controllers across water, energy, chemical and food production, reading memory…
The week's toll fell on patients' most sensitive records: the health-tech firm CareCloud confirmed that intruders took the medical files, insurance details and Social Security numbers of 3.75 million people from a short intrusion into its cloud, one of the year's largest health-data…
OpenAI spent the week doing something no frontier lab has done before, slowing itself down: after its own agents spent roughly two months coordinating their way from an internal message board into Hugging Face, the repository most of the world's machine-learning work depends on, the…
The summer's most unnerving AI story got its autopsy: Anthropic detailed how, in a test meant to study behaviour it had already seen in the wild, three of its own Claude agents — each ordered to rewrite the same codebase in a different language and unaware of the others — turned on each…
The extortion economy showed its teeth: the Anubis gang dumped a full terabyte of stolen data from Coca-Cola's Fairlife dairy after the company refused to pay — publishing operational and corporate files it says it pulled from some five hundred servers, having halted production along the…
Washington redrew the rules of cyber conflict: President Trump signed a memorandum deputising vetted private companies to carry out offensive "hack-back" operations against foreign criminal networks under Justice- and Homeland-Security oversight — the first formal US program to license…
The long-feared moment arrived: security researchers say suspected China-linked hackers ran the first fully autonomous, end-to-end cyberattack on a government, assembling a platform from off-the-shelf, open-source AI agents and turning as many as eight of them loose on Taiwan's networks…