FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist

The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.
The post FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist appeared first on SecurityWeek.
Continue reading FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist→

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.
The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek.
Continue reading Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain→

DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work

Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The agent gets to work in two situations: an allowed user asks for something, or a rule your team wrote covers … Continue reading DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work→

The first ten lines of a command policy for AI coding agents

In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity attached when actin… Continue reading The first ten lines of a command policy for AI coding agents→

Byoky: Open-source wallet for AI API keys

Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps that wan… Continue reading Byoky: Open-source wallet for AI API keys→

New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value

Cybersecurity researchers have discovered a new Windows infostealer malware called VOLTA-AUTODOXER (aka VOLTA) that makes use of a large language model (LLM) to rank a victim’s stolen data by their monetization value.

Like other typical stealer famili… Continue reading New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial Value→

Posted in Uncategorized

Product showcase: Trust Onion uses rotating codewords to verify callers

Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I tested the iPh… Continue reading Product showcase: Trust Onion uses rotating codewords to verify callers→

Ransomware gang talked AI agents into doing much of its dirty work

The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, w… Continue reading Ransomware gang talked AI agents into doing much of its dirty work→