Nation-State Cyber Threats
A coordinated public-private takedown disrupts one of 2026's largest China-based cybercrime networks — and Google sues a related operation for abusing Gemini.
Ransomware
Breaking the financial pipes of the ransomware economy — Europol's latest structural disruption.
Cyber Attacks
A newly-detailed telecommunications fraud campaign uses fake CAPTCHA verification prompts to trick users into sending up to 60 international SMS messages, quietly adding tens of dollars to phone bills while Keitaro traffic distribution campaigns drive parallel crypto-wallet drainer scams. SANTA CLARA, CALIFORNIA — Security researchers have uncovered a massive,
Decentralized Finance (DeFi)
Original $293M LayerZero bridge attack caused 43x larger $13B TVL crash across Aave (-43%) + 26 protocols. North Korea's Lazarus hits $578M in 18 days as bridges become primary attack vector. GLOBAL — The fallout from the Kelp DAO exploit has officially mutated from a singular protocol theft into a
Crypto-Crime & Laundering
Blockchain security researchers and protocol developers have identified the North Korean state-sponsored Lazarus Group as the primary suspect in the staggering $290 million theft from Kelp DAO. SEOUL, KOR — The decentralized finance (DeFi) ecosystem is reeling after a sophisticated exploit targeted Kelp DAO, a leading liquid restaking protocol. Early
Mobile Security
A sophisticated "FakeWallet" campaign has bypassed Apple’s stringent review process, leading to the theft of millions in digital assets through fraudulent Ledger and Trezor clones. CUPERTINO, CA — Apple’s reputation for hosting a "curated and secure" ecosystem is facing renewed scrutiny following the discovery of
Mobile Security
The theft of a high-profile artist's retirement fund highlights a persistent vulnerability in mobile app marketplaces and the rising sophistication of "brand impersonation" attacks. SAN FRANCISCO, CA — Garrett Dutton, better known as the alternative hip-hop musician G. Love, has gone public with the loss
Supply Chain Attack
A sophisticated supply chain attack exploits the ‘Shell Commands’ plugin for Obsidian, delivering the PhantomPulse Trojan to high-value targets in the finance and cryptocurrency sectors. RESEARCH TRIANGLE PARK, NC — Security researchers have uncovered an elaborate malware campaign targeting users of the popular note-taking app, Obsidian. The campaign, dubbed
Crypto-Crime & Laundering
The disruption of the W3LL Panel dismantles a "full-service" cybercrime ecosystem that bypassed Multi-Factor Authentication (MFA) to target thousands of Microsoft 365 enterprise accounts. ATLANTA, GA — In a major blow to the "Phishing-as-a-Service" (PhaaS) industry, the FBI’s Atlanta Field Office
FinTech Security
The global crypto exchange confirms it is the target of a blackmail plot involving internal data, but maintains that core trading systems and client funds remain isolated and secure. SAN FRANCISCO, CA — Kraken, one of the world’s largest cryptocurrency exchanges, is currently navigating an active extortion campaign after a
Trending
In one of the largest coordinated crackdowns on decentralized finance (DeFi) crime to date, the NCA, U.S. Secret Service, and Canadian authorities have identified 20,000 victims and halted a massive multi-national "drainer" scheme. LONDON, UK — A massive international law enforcement effort dubbed Operation Atlantic has
Cyber Attacks
Drift Protocol, a prominent decentralized exchange (DEX) operating on the Solana blockchain, has been targeted in a massive exploit resulting in the loss of approximately $285 million. Leading blockchain forensic firms, including Elliptic, TRM Labs, and Chainalysis, have attributed the attack to threat actors associated with the Democratic People’s