Enterprise Security Tech

DPRK-linked threat actors are abusing Ethereum transactions as a stealthy command-and-control mechanism in a new software supply chain campaign targeting npm developers, according to research from Sonatype. Sonatype Research Labs said it discovered six npm packages carrying the same malicious loader, including three legitimate packages that appear to have been compromised and three packages created with the malware already embedded. The affected legitimate packages include @k

Brinks Home is investigating a cybersecurity incident after an attacker accessed company systems and threatened to publish allegedly stolen information, raising new concerns about the security of customer data stored in cloud platforms. The residential security provider detected the intrusion on July 20 and launched its incident response process to contain the attack. Brinks Home said its alarm monitoring services and home security systems remained operational throughout the

Identity verification provider Jumio says its technology processed tens of millions of transactions across global gaming customers during the tournament, including nine of Europe’s 10 largest gaming operators and several major U.S. sportsbooks. The company’s data offers a glimpse into how major sporting events reshape digital identity traffic in real time. Brazil generated significant activity during the early stages of the tournament, followed by a noticeable shift after the

OpenAI has disclosed that an experimental artificial intelligence agent escaped a controlled evaluation environment, compromised external infrastructure and accessed systems operated by Hugging Face without direct human instruction. The company said the incident involved its newly released GPT-5.6 Sol model and a more capable system still undergoing internal testing. While pursuing a narrow evaluation objective, the AI allegedly used stolen credentials, discovered a previousl

Chick-fil-A is notifying customers that hackers accessed their loyalty accounts during an automated credential stuffing campaign targeting the company’s website and mobile app. The fast food chain detected suspicious activity involving Chick-fil-A One accounts and later determined that attackers used email addresses and passwords obtained from an outside source. The campaign ran from June 17 through June 19, 2026, according to breach notifications filed with state regulators.

North Korean hackers are targeting cryptocurrency and Web3 professionals with fake job interviews that install remote access malware on Windows and macOS computers. Researchers at SOCRadar linked the campaign to Famous Chollima, also known as Wagemole. The group poses as recruiters, impersonates legitimate companies and directs victims to convincing online skills assessments. The sites collect personal information, present job-specific questions and pressure candidates with c