Hackers steal over $130 million by exploiting bug in offline hardware wallets

A security vulnerability in the cryptocurrency hardware wallet Coldcard is allowing hackers to drain the crypto from victims’ wallets. The total losses amount to more than $130 million, according to blockchain monitoring firms.

FBI arrests man accused of using Steam games to drain victims’ crypto wallets

Prosecutors accused 21-year-old student Zyaire Wilkins of publishing on Steam several fake video games that contained malware, infecting thousands of victims, and stealing crypto from some of them.

UK cops say arrest of two young hackers disrupted the operations of an infamous hacking group

Owen Flowers and Thalha Jubair, two members of the prolific Scattered Spider hacking group, pleaded guilty and were sentenced to five years and six months in jail for hacking London’s metropolitan transit system.

A hacker’s arrest just revealed how Microsoft can track your Windows device

A hacker used a VPN to stay anonymous. Microsoft’s Windows Global Device Identifier logged his activity anyway and handed it to the FBI.

Polymarket says hackers stole users’ funds

The prediction market giant Polymarket said it’s refunding users who had funds stolen due to a third-party breach.

Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world

An alleged Russian-speaking group of cybercriminals is reportedly compromising and targeting several major companies that use Fortinet Firewalls and VPNs through previously known passwords.

Chinese cybercrime operation that used AI to scam ‘hundreds of thousands of victims’ sued by Google

The tech giant said a group called “Outsider Enterprise” used AI to scam hundreds of thousands of victims, sending 2.5 million text messages over a span of two weeks.

Oracle warns of security bug that hackers abused to breach 100+ companies

The tech giant warned of a security flaw that a cybercrime gang said it’s exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.

Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations

The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.

Google and FBI warn of ransomware group that sends fake IT workers to hack victims in person

Cybercriminals, part of a gang known as Silent Ransom Group, have sent people pretending to be IT support employees to law firms’ offices, where the criminals have stolen data using USB drives or remote access tools.