critical national infrastructure - Page 7

Anthropic has launched the Anthropic Cyber Mission: a Critical Infrastructure Defense Program with 11 founding partners and OSS Scanner, a free opt-in service that sends open-source projects unreviewed, model-written bug reports. What is confirmed, what is Anthropic's expectation, and what is not yet proven.

FBI Director Kash Patel says agents have arrested another suspected ShinyHunters co-conspirator over the FBIjobs.gov incident. The suspect's name and charges are not public; reports of a Canadian arrested in Pennsylvania rest on unnamed sources. What is confirmed, what is reported, and what is only the group's own claim.

JR East and Viewcard say about 6.09 million accounts, mostly email addresses, may be exposed after the IDC Frontier ransomware attack. What the companies and Japanese media report, what is not affected, and what it does not prove.

Three security items from 8–9 October 2026: a security firm reports attack attempts against a patched, maximum-severity SonicWall SMA1000 flaw (success unconfirmed); Pwn2Own Ireland pays $1,262,000 for 98 zero-days; and Microsoft says Windows Update certificates expire on 17 May and 19 June 2027.

An attacker returned 15,000 BNB to the 79thVault project on BNB Chain, a Manhattan jury convicted Uranium Finance hacker Jonathan Spalletta on all counts, and a London court jailed a SIM-swap fraudster for two and a half years. Plus two small DeFi exploits flagged by SlowMist.

CrowdStrike says an unnamed, likely Chinese-speaking attacker used ARTEX, an open-source AI penetration-testing agent, alongside several AI models to steal data from South Korean financial firms. What CrowdStrike found, what Korean investigators say, and what it does not prove.

Ledger says it is investigating reports of lost funds among South East Asia customers who bought devices from the reseller CryptoBilis, and has asked the reseller to pause sales. Loss totals of about $86m come from Hacken and an on-chain analyst, not Ledger. The cause is unconfirmed.

Travel site skyticket says about 14.64 million records were taken. Bookoff says up to about 6.43 million, and Times Car, Lawson, karaoke firm Daiichikosho, H.I.S. and resort operator Resorttrust have also disclosed leaks. What each company has confirmed, what Kyodo reports, and what it means for customers.

Three newly disclosed incidents: Ginkgo Bioworks says an outsider accessed data from cloud environments tied to its former biosecurity business; Turkey's data regulator says a ransomware attack on Yıldız Technical University may affect about 140,000 students and 4,500 staff; and Green Clinic in Ruston, Louisiana, is rebuilding after ransomware locked its records. What each organisation has confirmed.

OpenAI says it banned two influence operations, one from Russia running a fake Latin American think tank and one from Iran pitching articles under seven fake bylines. It rates the Russian one the first "Category 5" operation it has disrupted. What happened, what AI did and didn't do, and what remains unproven.