Follow the latest coverage, related explainers and connected technology stories.
In its 2026 Digital Defense Report, Microsoft warns that threat actors are currently benefiting from artificial intelligence faster than security teams, particularly in vulnerability discovery, malware development, and accelerating post-compromise activity. The company believes that the time needed to turn a discovered vulnerability into a weapon has fallen to less than 24 hours, although real-world campaigns still rely heavily on human direction.
Bitget revealed that the theft of $387.5 million in crypto assets resulted from the compromise of two third-party security devices using zero-day vulnerabilities. The attack gave the attackers access to the wallet environment and enabled them to deploy malicious tools used to carry out unauthorized transfers.
The FBI urged members of the ShinyHunters group to turn themselves in after the arrest of a 24-year-old Dutch man suspected of holding a leadership role within the group. The bureau says the group and its partners breached more than 140 organizations and obtained at least $70 million in extortion payments.
The ShinyHunters group claims it exploited a previously unknown vulnerability in Oracle PeopleSoft to access systems belonging to the Federal Bureau of Investigation and steal data belonging to employees and job applicants. The FBI has not confirmed the breach or data theft and said it is investigating claims related to FBIjobs.gov.