Tag: security
North Korea’s Lazarus makes off with $290M crypto in Kelp DAO heist after siphoning funds using fraudulent transactions
Lazarus Group exploits LayerZero integration to steal $290M from Kelp DAO Attackers compromised servers verifying cross‑chain transactions, feeding false data to approve fake transfers LayerZero and Kelp DAO dispute blame The infamous North Korean state-sponsored hacking group, Lazarus, has done it again. It successfully walked away with $290 million in…
Read More
Robots are fighting wars and helping to quash riots — China is arming riot police with squads of AI controlled drones and Ukraine wants to man the frontlines with 25,000 robots
China and Ukraine are testing new robotic capabilities Robots are being deployed to the frontlines of the war with Russia Protests in China could soon be policed using squads of robots and drones Robots can’t surrender, don’t suffer issues with morale, and won’t refuse an order. That’s why militaries and…
Read More
‘They mopped the floor with me and pulled every childish game they could’: Disgruntled researcher releases second major Windows zero-day — claims Microsoft ‘would ruin my life, and they did’
Researcher “Chaotic Eclipse” discloses new Microsoft Defender zero‑day dubbed RedSun Flaw enables local privilege escalation to SYSTEM by abusing Defender’s file rewrite behavior Comes days after BlueHammer release; Microsoft says it investigates and supports coordinated disclosure The same disgruntled researcher who recently disclosed a zero-day vulnerability in Windows has now…
Read More
Microsoft experts warn North Korean attackers target macOS users with ‘a highly reliable infection chain’ to steal passwords, financial data and more — here’s how to stay safe
Microsoft warns North Korean Sapphire Sleet (APT38) targeting Western businesses with fake job scams Malicious Zoom lookalike drops infostealers to steal cryptocurrency Campaign focuses on macOS users; Apple pushed automatic protections to block attacks North Korean state-sponsored threat actors called Sapphire Sleet are targeting businesses in the west with infostealer…
Read More
China completes testing on ‘deep-sea electro-hydrostatic actuator’ capable of slicing undersea cables as deep as 3.5 kilometers – new compact subsea vessel testing bridges the ‘last mile’ and could deploy in 2026
China has successfully tested a new subsea cable cutting vessel The vessel uses a self-contained electro-hydrostatic actuator While designed for civilian purposes, the vessel has military application China has completed the first successful test on a new deep-sea vessel that is capable of cutting subsea cables at a depth of…
Read More
‘This is not a traditional coding error’: Experts flag potentially critical security issues at the heart of Anthropic’s MCP, exposes 150 million downloads and thousands of servers to complete takeover
Ox researchers warn Anthropic’s Model Context Protocol has systemic RCE flaw Vulnerability baked into MCP SDKs across Python, TypeScript, Java, Rust 200,000+ instances exposed; Anthropic says behavior is “expected” Security researchers Ox have claimed Anthropic’s Model Context Protocol (MCP) contains a “critical, systemic vulnerability” which puts hundreds of thousands of…
Read More