Liquid Network hackers returned 3,400 BTC after draining $320 million from its federation wallet, but about $47 million in Bitcoin remains outstanding.
Category: eSecurity Planet
WeedHack Malware Persists as Fake Minecraft Sites Survive C2 Disruption
Fake Minecraft sites continue distributing WeedHack malware through SEO poisoning and trusted hosting platforms despite disruption of its original C2…
OpenAI Confirms AI Agents Used German Wiki to Bypass Restrictions
OpenAI agents used a German wiki to coordinate and bypass restrictions, exposing gaps in read-only internet controls and AI agent containment.
Mathspace Breach Exposes Data of 1.08 Million in Australia, New Zealand
Mathspace says a breach exposed data tied to nearly 1.08 million people in Australia and New Zealand after attackers exploited a self-hosted Metabase flaw.
IDScan Faces Four Lawsuits Over Alleged Driver’s License Breach
IDScan faces four proposed class actions after a dark-web service claimed to hold more than 153 million U.S. and Canadian driver’s license records.
MikroTik RouterOS Vulnerabilities Actively Exploited via SSH
Attackers are actively exploiting MikroTik RouterOS flaws for unauthenticated router takeover. Here are the fixes, indicators of compromise, and…
Cloudflare and CrowdStrike Bring AI Agents Into the Cyber Defense Fight
Cloudflare is using OpenAI GPT-5.6 Cyber to automate vulnerability discovery and remediation as AI agents reshape enterprise security operations.
CrowdStrike Investigates FalconFlank Zero-Day as PoC Reaches SYSTEM
CrowdStrike is investigating FalconFlank, a privilege-escalation PoC that can reach SYSTEM access. Here’s what defenders should disable and monitor.
Why Vulnerability Management Must Move Beyond CVSS
Learn why vulnerability management must move beyond CVSS to prioritize real risk using exploitability, asset context, attack paths, and AI-driven analysis.
Cyber Resilience Starts With a Unified Recovery Strategy
Learn why cyber resilience requires a unified recovery strategy that restores data, configurations, identities, cloud systems, and critical dependencies.
Attack Surface Reduction Is the Only Scalable Defense Strategy Left
Learn how attack surface reduction helps organizations eliminate unnecessary exposure, reduce security noise, and strengthen defenses through automation.
Why Security Teams are Becoming Builders of Agentic AI, not just Buyers
Security teams are building custom AI agents to improve defense, close tooling gaps, and automate workflows, but strong governance remains critical.
Google’s Chrome Update Patches Sixth Zero-Day Exploited in 2026
Google patched CVE-2026-85046, the sixth Chrome zero-day exploited in the wild in 2026. Here’s how to update your browser and stay protected.
CVE-2026-19949 Leaves Millions of WordPress Sites Running Vulnerable Plugin Versions
A high-severity flaw in All-in-One WP Migration leaves 3.25 million WordPress sites exposed, with vulnerable versions potentially leading to site…
Dropbox Says Lenovo ID Flaw Compromised 5,000 Accounts
A Lenovo ID verification flaw let attackers compromise 5,000 Dropbox accounts without passwords. Learn what happened and how users can stay protected.
AI Attack Surfaces and Supply Chain Threats Define the Week
Weekly summary of Cybersecurity Insider newsletters
CISA Adds 7 Exploited Flaws as Attackers Target AI Infrastructure
CISA added seven exploited flaws to its KEV catalog, including LiteLLM, Kestra, Starlette, and SonicWall vulnerabilities under active attack.
Coder Registry Compromise: Malicious Terraform Modules Explained
Coder’s compromised module registry served malicious Terraform modules that stole cloud, CI/CD, AI, and SSH credentials during a 14-hour attack window.
Aesto Health Breach Exposes Data of More Than 9.5 Million People
Aesto Health says a December 2025 cyberattack affected more than 9.5 million people, potentially exposing medical, financial and identity data.
X Users Are Getting Flooded With Password Reset Emails After X Money Launch
X users are reporting repeated password-reset emails after the X Money launch, raising concerns about phishing and potential account takeover attempts.