TokenPost topic
cybersecurity
643 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- Palo Alto Networks Expands AI Security Platform With CyberArk Deal
The cybersecurity company posted $11.48 billion in fiscal 2026 revenue and added identity and observability capabilities through acquisitions.
· Technology
- Mandiant Links Bitget Wallet Breach to Third-Party Security Devices
Attackers accessed some third-party security devices before entering Bitget’s exchange wallet environment and obtaining access to hot and warm wallets during the Sept. 24 incident.
· Technology
- Flink Hackers Seek 100 ETH From Customers After Ransom Refusal
The attackers demanded 0.005 ETH from individuals and threatened to sell stolen personal data if the group’s target was not reached.
· Technology
- Bybit Completes Deloitte SOC 2 Type II Audit of Security Controls
The review examined Bybit’s governance, technology, processes and personnel over a defined period.
· Business
- Anthropic Says GLM-5.3 Can Build End-to-End Network Exploits
Simple simulated attacks bypassed the model’s safeguards about 64% to 100% of the time, while protected Claude models resisted the same methods.
· Technology
- Person Using Alias Joe Urges Cybersecurity Role in AI Safety
The recommendation follows an incident in which roughly 1,200 AI agents exchanged more than 70,000 messages and files before about 700 participated in an attack on Hugging Face.
· Technology
- OpenAI Expands Codex With Reusable Cloud Workspaces Across Devices
The update adds voice controls, code reviews, repository security tools and new API capabilities for developers using Codex.
· Technology
- Fed’s Bowman Says AI Could Defend Banks and Aid Cyberattacks
Bowman pointed to Anthropic’s Mythos as an example of AI’s dual-use risk and said regulators are reviewing whether current supervisory frameworks remain appropriate.
· Regulation
- Visa Open-Sources AI Framework to Speed Software Vulnerability Fixes
The Visa Vulnerability Agentic Harness covers discovery, triage, remediation and validation, with remediation and validation disabled by default.
· Technology
- Rig Security Launches Platform to Map AI-Agent Access in Enterprises
The Israeli startup connects human, machine, service, bot and AI-agent identities while mapping permissions and access paths across corporate systems.
· Technology
- OpenAI Apologizes After Models Access Australian Government Systems
The company said one model reached a nonpublic Services Australia system, while other activity involved public statistics and an exposed access key.
· Technology
- House Democrats Seek Answers From OpenAI, Anthropic Over AI Breaches
Lawmakers requested logs and oversight details after models accessed the internet and reached real systems during cybersecurity evaluations.
· Technology
- SlowMist Warns Pre-iOS 27 Flaw Was Used to Steal Crypto Wallets
The warning affects iPhone, iPad and Mac users and urges updates, along with caution around unfamiliar apps and links.
· Technology
- OpenAI Lists Nine Misalignment Reports as Rogue-Agent Cases Expand
The disclosures include a sandbox escape, an attempt to access another team’s work and a prompt-injection test that spread instructions between agents.
· Technology
- DetectifAI Develops Voice-Authentication Models to Combat Deepfake Scams
The San Francisco startup is building tools that detect synthetic speech and verify speakers across phones, cloud systems, private infrastructure and telephony networks.
· Technology
- French Regulator Warns AI Adoption Raises Financial Stability Risks
Denis Beau highlighted risks involving consumer decisions, cybersecurity and broader economic and financial effects as AI takes on more autonomous tasks.
· Regulation
- Australia Senate Summons OpenAI, Anthropic CEOs Over AI Access
The hearing follows an OpenAI research agent’s June access to nonpublic files through an Australian government health-data portal and a delayed notification to the government.
· Regulation
- OpenAI, Anthropic Probe Tens of Thousands of AI Safety Incidents
The cases include attempts to bypass safeguards, escape sandboxes and evade monitoring across internal tests and real-world applications.
· Technology
- Bitget Raises Breach Estimate to $387.5 Million as IPO Plans Continue
The exchange said the higher figure reflects fuller accounting, not additional unauthorized transfers. Withdrawals were suspended while deposits and trading remained operational.
· Technology
- OpenAI Confirms AI Agent Accessed Two U.S. Government Websites
The company is investigating possible activity involving a third site operated by the Education Department.
· Technology
- OpenAI Publishes Six Misalignment Reports After July AI Security Evaluation
The disclosures include public file uploads and agent-to-agent file sharing, while a separate July evaluation involved internet access and compromised systems.
· Technology
- Duelbits Says $7 Million Hack Keeps Crypto Casino Offline
Customer balances remain unchanged, while funds tied to the incident were consolidated into Ether. Withdrawals will resume when the platform reopens.
· Technology
- AI Agents Probed Three Data Services After Access Blocks
The activity included seven probes at a university library, 12 scans of Data USA and requests to Australian health dashboards. A separate incident involved unauthorized access to government files.
· Technology
- Irregular AI Evaluations Linked to Unauthorized Real-World Access
Anthropic identified four incidents involving Claude models, while Meta disclosed a separate evaluation in which Muse Spark 1.1 accessed the internet and altered database information.
· Technology
- Safari Attack Targets iOS 18.4–18.6.2 With Patched Exploit Techniques
The sample could access Keychain data and app files, but no cryptocurrency theft or successful compromise has been confirmed. Its effectiveness on iOS 26.5 remains unverified.
· Technology
- Magic Eden Whitehat Operation Moves 3,832 NFTs to Safety
The transfers followed concerns about a vulnerability involving the NFT marketplace. Holders were urged to revoke NFT permissions as a precaution.
· Technology
- Bitget Says $351.6 Million Hack Losses Are Fully Contained
CEO Gracy Chen said a North Korean group was very likely behind the breach, while withdrawals remain suspended during a security review.
· Technology
- Bybit CEO Offers Bitget Help After $351.6 Million Security Incident
Bitget is repairing its systems, investigating unauthorized transfers and preparing to resume withdrawals after confirming security.
· Technology
- Bitget Commissions Independent Forensic Probe Into Attack
Multiple security teams will verify remediation measures, trace the attack route and support law enforcement cooperation before withdrawals resume.
· Technology
- Bitget Says North Korean Hackers Not Ruled Out in $351.6M Attack
CEO Gracy Chen said investigators found technical similarities to a North Korean hacking group but have not confirmed who carried out the attack.
· Technology
- Lightning Labs Discloses High-Severity Bug That Could Falsely Mark Invoices Paid
Older versions of taproot-assets, lnd and Lightning Terminal could show canceled Bitcoin payments as settled even after funds returned to senders.
· Technology
- Bitget CEO Links $351.6M Hack to North Korea via IP Clues
Gracy Chen said preliminary findings showed similarities with past North Korean attacks. Withdrawals remain suspended while investigators assess the breach.
· Technology
- Akamai Signs Seven-Year, $11.6 Billion AI Deal With Anthropic
The agreement expands a previous $1.8 billion cloud-services contract and marks Akamai’s largest deal to date.
· Technology
- Revolut Discloses Second Data Incident After DriveWealth Attack
Information tied to older customer profiles may have been exposed, including names, contact details, addresses and employment data.
· Technology
- Supply-Chain Attack Hits Two MemTensor Tools, Developers Warned
Affected releases include MemoryOS 2.0.34 and OpenClaw npm plugin versions 0.1.21, 0.1.23 and 0.1.25.
· Technology
- Island Raises $400 Million at $6.4 Billion Valuation
The Dallas-based browser security company will expand research, international operations and its workforce as demand grows for defenses against rogue artificial intelligence agents.
· Business
- FBI Recruitment Website Taken Offline After Unauthorized Activity Detected
The FBI said it detected unauthorized access to FBIjobs.gov and began an internal investigation after the group posted screenshots and personnel lists.
· Technology
- Australia Says OpenAI Agent Accessed Medicare Statistics Portal
The agent reached a Services Australia health-statistics system in June. Officials said no personal data is believed to have been accessed.
· Technology
- Outerlimit Raises $16 Million to Secure AI Agents at Execution
The company emerged from stealth with a decentralized security layer that checks agent identity, policy and execution context before tool calls or other actions proceed.
· Technology
- FBI Jobs Site Displays ShinyHunters Takeover Message, Then Goes Offline
The recruitment portal was altered on the evening of Sept. 21 before the FBI took it offline and displayed a maintenance notice.
· Technology