CSBadmin
A single prompt undid the guardrails on AWS agent infrastructure
One chat message pulled temporary cloud credentials out of an agent and opened every other agent in the account.
Shai-Hulud worm burrows into an AI agent platform’s SDK
A poisoned npm release of Tensorlake's SDK carried a payload that hunts cloud credentials and can wipe a home directory.
Two odd characters let attackers fake trusted web addresses
Researchers registered 20 lookalike domains that Chrome and Edge display as the genuine article.
Let’s Encrypt will cut default certificate life to 64 days
The shorter lifetime starts February 10, 2027, and it is a rehearsal for 45-day certificates in 2028.
A leader of a 15,000-mule laundering network admits guilt in the US
Your Mule Cashout moved stolen funds abroad and stiffed the very people it recruited to withdraw the cash.
Cardiac monitor maker iRhythm says hackers took data on 360,000 people
Intruders spent five days inside third-party-hosted business applications before the company noticed.
A hidden chip inside Ledger wallets drained $93M in crypto
Tampered devices sold through one Southeast Asia reseller carried a circuit board that photographed recovery phrases.
An AI-driven crew turned 51 agents loose on Ukrainian targets
A Russian-speaking broker ran two attack pipelines at once, and an open directory handed researchers the whole operation.