BleepingComputer

Northflank, a cloud deployment platform, has suffered a security breach that led to the abuse of customers' AI API keys. According to BleepingComputer, attackers were able to access credentials stored with the service and misuse them, potentially running up costs or consuming quotas on customers' AI accounts. Customers are being urged to review and rotate their keys.

Harvard University has suffered a data breach affecting 851,000 accounts, according to a report by BleepingComputer. The incident exposed personal information linked to a large number of accounts tied to the university, raising questions about how the intrusion happened and who is behind it. Cybersecurity watchers are monitoring the story as details about the scope of the exposure continue to emerge.

Google says it has disrupted a botnet known as XCPE that infected roughly a million Android devices, many of them cheap TV streaming boxes sold with malware pre-installed or added after sale. The company banned the manufacturer tied to the scheme from its services and Play Store. Security observers are highlighting the risks of low-cost Android hardware shipping with hidden malicious code.

Harvard University suffered a data breach that exposed information belonging to roughly 851,000 accounts, according to a security news report. The incident involves the personal data of students, staff or alumni associated with the university. Cybersecurity observers are flagging the breach as another example of a major academic institution failing to protect sensitive user information, raising concerns about university data security practices.

The FBI has linked the theft of roughly $6.3 billion worth of cryptocurrency from Binance to hackers associated with North Korea. The attribution points to state-sponsored cyber actors known for targeting crypto exchanges to fund the regime. Security watchers are circulating the news, noting it as one of the largest crypto thefts ever attributed to North Korean groups, and reviving debate over exchange security and international cyber sanctions.

The PC game launcher for Goddess of Victory: NIKKE was compromised to distribute remote access and data-stealing malware, security outlet BleepingComputer reports. Players who downloaded the launcher risked having their credentials and personal data harvested by attackers. Gamers and security researchers are warning users to download the game only through official channels and to scan systems for infection.

BTCPay Server has issued a warning that attackers are stealing funds from hot wallets running on outdated instances of its open-source cryptocurrency payment platform. The organization is urging users to update their servers immediately to patch the vulnerability being exploited. Security observers are amplifying the alert across cybersecurity communities.

A new Android vulnerability dubbed 'SMS of Death' allows attackers to remotely crash phones that have not received security updates, according to a report by BleepingComputer. The exploit works via SMS, meaning targets need only a phone number to be attacked. Security commentators are urging Android users to install the latest patches promptly, and the flaw is drawing attention across cybersecurity discussions.

A UK multi-academy school estate has been struck by ransomware belonging to the 3AM group, in what security researchers suspect may be one of the first AI-assisted cyberattacks on education infrastructure. Details remain limited, but the incident is drawing attention for its potential use of artificial intelligence in the attack and its impact on schools' operations and data.

Chinese-linked hackers have used an AI tool called ARTEX to automate cyberattacks against around 200 organizations, according to a report by BleepingComputer. The campaign shows threat actors increasingly relying on artificial intelligence to scale reconnaissance and intrusion efforts with minimal human involvement. Security teams are being urged to review defenses as AI-driven offensive tooling lowers the cost and skill barrier for large-scale attacks.

BTCPay Server, an open-source Bitcoin payment processor, has warned administrators that attackers are stealing funds from hot wallets on instances running outdated software. The warning, reported by BleepingComputer, urges merchants and node operators to update their servers immediately and secure their wallet keys. The incident highlights ongoing security risks for self-hosted crypto payment infrastructure.

Binance says last week's massive crypto theft was carried out after attackers posed as recruiters in a fake job interview, tricking an insider into compromising systems. The exchange disclosed that the scheme led to the loss of roughly $63 billion in cryptocurrency. Security observers are highlighting the incident as an example of social engineering targeting crypto firms.

Hardware wallet maker Trezor has issued a warning about a suspected implant designed to steal cryptocurrency from its devices. The alert, reported by BleepingComputer, is raising concerns in the crypto community about supply-chain tampering and the physical security of cold-storage wallets. Users are being urged to check their devices and follow the company's guidance.

Binance says the theft of $6.3 billion in cryptocurrency was traced to a single compromised DevOps laptop, according to reporting by BleepingComputer. The disclosure highlights how one endpoint with privileged access can jeopardize even major crypto exchanges, and security commentators are sharing the story to stress better operational security and access controls across the industry.

Attackers have gained access to Microsoft 365 customer environments by exploiting ConnectWise, a widely used remote access and IT management platform, in what is being described as a supply-chain attack. Security teams are being urged to check whether their tenants were exposed and to review access logs. The incident raises fresh concerns about the security of third-party tools used by IT service providers.

A fraudulent crypto app that slipped onto Apple's App Store has been linked to the theft of roughly $23,000 from a user's wallet, according to BleepingComputer. The fake app posed as a legitimate crypto terminal to trick victims into entering their recovery credentials. The case highlights ongoing scrutiny of Apple's app review process and the risks of malicious apps reaching official stores.

Developer platform Northflank suffered a security breach that led to attackers abusing customers' AI API keys, according to a report by BleepingComputer. The incident raises concerns about how cloud and AI infrastructure providers protect credentials, and may have left customers facing unexpected costs or unauthorized model usage. Customers are being warned to rotate keys and review usage logs.