Trust & Security
CrowdStrike Reports VAPOR PANDA Used ARTEX Against 200+ Organizations
CrowdStrike separates broad targeting from confirmed post-exploitation and describes an operator directing coordinated software agents.
◆ Heath Callahan
Beat
Trust & Security
-
-
Trust & Security
SpyCloud Finds AI-Tool Tokens in Infostealer Logs
SpyCloud’s recovered malware logs name the AI-tool credentials responders must check after a developer’s machine is infected. The inventory includes account tokens, connected-service access and session cookies.
◆ Heath Callahan
-
Trust & Security
OpenAI Published the Rules for Its Agents and the Alarms That Watch Them
Two documents landed the same day: how the models should behave, and how the company says it notices when they do not. The headline number comes from a replay of an old break-in.
◆ Heath Callahan
-
Trust & Security
Ripple Froze the Stolen RLUSD. XRP Cannot Be Frozen.
Ripple became the third major stablecoin issuer to freeze funds drained from Binance, after Tether and Circle. Its own rulebook shows exactly where that power stops.
◆ Heath Callahan
-
Trust & Security
Binance Says a Compromised Engineer’s Laptop May Have Opened the $6.3B Drain; No Evidence of Leaked Keys
Withdrawals stay paused while security checks run, the exchange says it will cover user losses, and two blockchain intelligence firms say the attack bears North Korea's hallmarks.
◆ Heath Callahan
-
Trust & Security
The Freeze Playbook: How $2.3B Was Frozen in Hours
Tether and Circle locked more than $2.3 billion in stablecoins within hours of the Binance incident going public – using freeze powers written into their published terms long before anyone needed them.
◆ Heath Callahan
-
Trust & Security
Binance Probes Suspected Hot-Wallet Drain of Billions; Issuers Freeze $2.3B
Binance says user funds are "completely safe" while a reported drain of roughly $2.8 billion stays under investigation and stablecoin issuers freeze more than $2.3 billion.
◆ Heath Callahan
-
Trust & Security
DHS: 41,000+ Employee Records Leaked Online, Along With a Map of What Each Account Can Open
The records carry, for every account, a list of the internal systems that person is allowed to open. The actor says the data came from DHS's Okta single sign-on; Okta says it has no evidence its systems were compromised.
◆ Heath Callahan
-
Trust & Security
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Attackers never needed a password: they let victims finish the login, kept the key Microsoft issued afterward, and replayed it from their own machines for ten weeks.
◆ Heath Callahan
-
Trust & Security
The Login That Lies: Why Agent Auth Is Still Built for Humans
The canonical agent login opens a browser for a person — every workaround still borrows a human, and the standard underneath is still a draft
◆ Heath Callahan
