Home/Digest/Technology/Past issues
Technology digest,
Technology: KillSec Ransomware Infrastructure Dismantled Amid… (+5 more)
Vulnerabilities
FATF Report Highlights Scam Compounds as Major Fraud Threat
The Financial Action Task Force (FATF) has released a report detailing the rise of scam compounds, which are responsible for significant transnational fraud, estimated at $500 billion annually. These operations often involve trafficked individuals, with around 120,000 in Myanmar alone forced into scamming. The report emphasizes the use of instant payment platforms and cryptocurrencies to facilitate these scams, with funds often moved within minutes. FATF has proposed six principles for combating these illicit financial flows, focusing on dismantling the criminal networks and improving cooperation among technology and financial sectors. The report also highlights the importance of rapid intervention within the first 24-72 hours after a scam is detected to recover assets. Successful initiatives, such as the UK's Scam Signals and Indonesia's Anti-Scam Centre, demonstrate effective strategies in reducing fraud losses. FATF President Giles Thomson stressed the need for urgent modernization of responses to these evolving threats.
Vulnerability · 2 sources · score 58 · Scam Signals Initiative
Ransomware
KillSec Ransomware Infrastructure Dismantled Amid Ongoing Cyber Threats
Europol's Operation KillSwitch led to the seizure of KillSec ransomware infrastructure and the provisional arrest of three suspects, including a 16-year-old identified as the main operator. The KillSec group is linked to around 1,000 attacks globally, with approximately 500 being successful. Concurrently, U.S. Authorities seized tools associated with the China-linked Flax Typhoon and disrupted a Chinese-language cybercrime ecosystem known as YAM store. In addition, various critical vulnerabilities, including CVE-2026-104286 and CVE-2026-21589, were reported as in the wild. Cyberespionage activities were noted, with Russia-aligned actors targeting organizations supporting Ukraine. The situation remains dynamic with ongoing investigations and emerging threats.
APT · 2 sources · score 79 · CVE-2026-0257, CVE-2026-104286, CVE-2026-111497, CVE-2026-21589, CVE-2026-46300
Breaches
Governance Gaps Lead to Sensitive Data Exposure via AI Tools
Research indicates that 47% of security leaders have faced sensitive data exposure through AI tools, with 77% of these incidents involving company-approved tools. A study by BlackFog reveals that while 98% of organizations have AI usage policies, only 56% have comprehensive technical controls to enforce them. Many organizations lack visibility into data shared with AI tools, with less than half able to track what data has been sent out. The governance gap is particularly pronounced for autonomous AI agents, with 56% of security leaders reporting these agents operate outside existing controls. The findings suggest a significant risk of data exposure, especially in industries like technology and telecoms, where 70% of respondents noted governance issues with AI agents.
Breach · 2 sources · score 52
Threat actors and malware
Espionage Scandal Involving Nvidia CEO Raises Security Concerns
A woman romantically linked to Nvidia CEO Jensen Huang has been identified as a spy for the Chinese government, prompting investigations by the FBI and congressional intelligence committees. This scandal raises significant questions about corporate security and foreign intelligence threats, particularly given Nvidia's critical role in AI technology with national security applications. Former deputy national cyber director Jake Braun emphasized that not only corporate executives but also students and professors at Illinois universities involved in technology research are potential targets for foreign intelligence operations. President Trump stated he believes Huang was unaware of the woman's espionage activities. The implications of this scandal extend beyond Nvidia, affecting the broader technology sector and its partnerships with academic institutions.
APT · 2 sources · score 59 · Charming Kitten
AI-Driven Scams Surge, Outpacing Traditional Phishing Attacks
Cybercrime is evolving, with AI scams surpassing phishing attacks, as reported by Akamai. Online scam detections doubled to 6.4 million in 2026, overtaking traditional phishing for the first time. Attackers are leveraging AI to create sophisticated, multichannel fraud schemes that manipulate consumers into providing sensitive information or making payments. The average lifespan of phishing attacks has decreased significantly, from 48 days to just 22 days, making traditional security measures less effective. The Asia-Pacific region is particularly affected, with a high percentage of risky login attempts. Experts emphasize the need for individuals to be cautious and verify sources before engaging in online transactions.
Phishing · 2 sources · score 58
Also worth knowing
AI Deepfake Scheme Leads to $129 Million Fraud Indictment
Three men have been indicted for using artificial intelligence to impersonate CEOs and lawyers, stealing $129 million from various companies worldwide. Jacob Soall, Sharon Hazan, and Guy Sheetrit targeted employees at firms, primarily in accounting departments, convincing them to wire large sums for fake transactions. The scheme ran from July 2024 to February 2026, affecting multiple organizations including hospital systems and financial institutions. The defendants used AI to create deepfakes of executives and attorneys, often directing victims to wire funds to accounts they controlled. The funds were then laundered through various international accounts and converted into cryptocurrency. All three have been arrested and face charges including wire fraud and money laundering, with maximum sentences of up to 20 years. The case highlights the growing threat of AI technology being weaponized for fraud.
Disinfo & Influence · 18 sources · score 56
New on leak sites
35 victims listed on ransomware leak sites by 18 groups in the 7 days before this issue. The most active:
Get the next one by email
The technology digest is free and arrives on Tuesdays. One click to leave.
Subscribe to the technology digest
A free account turns the digest into a personal watchlist: choose what you want to follow.