Hackers Grab $130M Using Brazil's Real-Time Payment System

Mathew J. Schwartz • September 3, 2025

Attackers on Friday used valid credentials for financial technology provider Sinqia to steal $130 million from two financial services firms in Brazil, using the country's real-time payment system Pix. The Brazilian Central Bank moved quickly to freeze the funds and has recovered some of the money.

Fraud Management & Cybercrime

Encryption Vendor Virtru Settles Patent Case With Microsoft

Latest

ODNI Cuts to Threat Sharing Raise Fears of Weakened Defenses

Chris Riotta • September 3, 2025

Director of National Intelligence Tulsi Gabbard said the decision to eliminate the Cyber Threat Intelligence Integration Center was meant to remove redundancies and save taxpayer money, though analysts warn the move could leave a major gap in federal threat information sharing.

Data Privacy

EU Court Preserves EU-US Data Privacy Framework

Akshaya Asokan • September 3, 2025

The European Union General Court on Wednesday dismissed a plea by a French politician to annul the legal framework underpinning commercial data flows across the Atlantic, rejecting claims that a U.S. intelligence agency oversight body is not independent of the federal government.

Artificial Intelligence & Machine Learning

Anthropic Hits $183B Valuation With $13B Raise

Rashmi Ramesh • September 3, 2025

Anthropic raised $13 billion in fresh capital, bringing its post-money valuation to $183 billion. A Series F round was co-led by Iconiq, Fidelity Management & Research Company and Lightspeed Venture Partners, with participation from a slew of institutional investors and sovereign wealth funds.

Cybercrime

Cloudflare Joins List of Salesloft Drift Breach Victims

Mathew J. Schwartz • September 3, 2025

The scope of the Salesloft Drift data breach continues to expand, now counting Cloudflare, Zscaler, Palo Alto Networks as victims and what investigators say are many hundreds more organizations that connected their Salesforce, Google Workspace or other tools to Salesloft's AI chatbot.

Artificial Intelligence & Machine Learning

Exposed LLM Servers Expose Ollama Risks

Rashmi Ramesh • September 3, 2025

More than a thousand servers running Ollama, a tool that can deploy artificial intelligence models locally, are exposed to the open internet, leaving many of them vulnerable to misuse and potential attacks. The bulk are dormant, but could be exploited through misconfiguration, Cisco Talos said.

AI-Powered SASE

Cato Networks Acquires Aim Security for AI Threat Protection

Michael Novinson • September 3, 2025

With AI use surging across enterprises, Cato Networks has acquired Israeli startup Aim Security to embed AI protection into its core architecture. CEO Shlomo Kramer says Aim’s broad and deep coverage around enterprise AI use makes it the ideal fit for Cato’s SASE platform.

Cyberwarfare / Nation-State Attacks

Silver Fox APT Abuses Windows Driver in Active Campaign

Pooja Tikekar • September 2, 2025

A Chinese nation-state cyber group is exploiting a Microsoft-signed driver to shut down Windows security protections. The attackers deployed the driver through a custom loader. The core weakness that Silver Fox relied on remained exploitable even after patching.

Data Security

Hacks on Specialty Health Entities Affect Nearly 900,000

Marianne Kolbasuk McGee • September 2, 2025

Specialty healthcare providers know what they're about when it comes to an irregular heartbeat or a wheezing lung. Cybersecurity, not so much. Hacks on specialty medical entities easily result in tens of thousands, if not hundreds of thousands, or even millions, of patient records being compromised.

Geo Focus: The United Kingdom

Cyberattack Disrupts Jaguar Land Rover Assembly Line

Akshaya Asokan • September 2, 2025

British carmaker Jaguar Land Rover shut down its Liverpool assembly line Tuesday following a cyberattack. "At this stage, there is no evidence any customer data has been stolen, but our retail and production activities have been severely disrupted," the company said.

Incident & Breach Response

Salesloft Drift Attacks Exposed Zscaler Customer Data

Mathew J. Schwartz • September 2, 2025

Threat researchers report that "a widespread data theft campaign" traces to attackers stealing OAuth access tokens for applications integrated with Salesloft's AI chatbot Drift, then exfiltrating data. Victims include Salesforce customers Zscaler and Palo Alto Networks.

Agentic AI

Event Horizon for Vibe Hacking Draws Closer, Anthropic Warns

Rashmi Ramesh • September 1, 2025

Artificial intelligence giant Anthropic said it's disrupted a cybercrime operation that tapped its large language models, including Claude Code, to an "unprecedented" extent to help automate a data theft and extortion campaign that targeted more than a dozen critical infrastructure organizations.

Cloud Security

Pentagon Probes Microsoft's Use of Chinese Coders

Chris Riotta • August 29, 2025

The Pentagon is reviewing Microsoft's decade-long use of "digital escorts" - U.S.-based staff who review code from Chinese engineers - into military cloud systems, a workaround now deemed a "breach of trust" that may have exposed sensitive but unclassified government data.