The Wire
Curated cybersecurity and tech news — AI-summarized, source attributed.
Identity Is the New Perimeter: Attackers Skip Exploits, Log In With Stolen Creds
Credential theft, session hijacking, and MFA fatigue have quietly overtaken traditional exploitation as the dominant intrusion path. Attackers don't need a CVE
Insider rot: Ransomware negotiators ran BlackCat attacks against their own clients
Angelo Martino, a former DigitalMint incident responder, pleaded guilty to running BlackCat ransomware operations against U.S. companies between April 2023 and
Lazarus-linked attackers drain $290M from KelpDAO via poisoned RPC nodes
KelpDAO, an Ethereum liquid restaking protocol, lost roughly 116,500 rsETH (about $293 million) on April 18 after attackers subverted the cross-chain verificati
MCP Design Flaw Turns AI Agent Tool Calls Into RCE Vectors
A design-level weakness in Anthropic's Model Context Protocol (MCP) lets attackers achieve remote code execution against systems that wire LLM agents to externa
Mexican Surveillance Firm Grupo Seguritech Pushes Into US Market
Grupo Seguritech, a Mexican surveillance vendor behind pervasive monitoring deployments like Plataforma Centinela in Ciudad Juárez, is moving into the United St
NGate Android malware swaps NFCGate for trojanized HandyPay to siphon NFC card data
A fresh NGate variant tracked by ESET is hijacking HandyPay, a legitimate Android NFC payment processor on Google Play since 2021, to capture card data the mome
NGate Malware Trojanizes Brazilian HandyPay App to Relay NFC Data and PINs
A fresh NGate campaign is targeting Brazilian banking customers by distributing a trojanized clone of HandyPay, a legitimate point-of-sale application. Once ins
NYT Builds Circumstantial Case That Adam Back Is Satoshi Nakamoto
A New York Times piece assembles a substantial body of circumstantial evidence pointing to cypherpunk Adam Back as the person behind the Satoshi Nakamoto pseudo
Pentagon Kills $8B GPS Ground Control Program After 16 Years of Failure
The US Space Force has terminated the Next-Generation Operational Control System (OCX), ending a 16-year effort to build a modernized command and control system
Roblox cheat script plus AI coding tool triggered full Vercel outage
A cascading failure on Vercel's platform traced back to an unlikely origin: a Roblox cheat script combined with an AI-assisted coding tool. The cheat generated
Seiko USA site defaced with ransom note claiming Shopify customer DB theft
Attackers replaced the Press Lounge section of Seiko USA's website over the weekend with a ransom message claiming they had breached the company's Shopify backe
Serial-to-IP Converters Carry Thousands of Latent Bugs Across OT Networks
Serial-to-IP devices — the small gateways that bridge legacy serial equipment to modern Ethernet networks — are riddled with vulnerabilities, many inherited fro