Loading summary
Transcript1 lines
- [00:04]
A
Anthropic models also did the hacky hacks. Coldcard was hacked for $70 million in Bitcoin, NPM adds publish time, malware scanning and Russia is behind the recent hotel WI fi hacks. This is the risky bulletin prepared by Catalyn Kim Panu and read by me, Claire aird. Today is the 3rd of August and this podcast episode is brought to you by Permeso Security. In today's top story, Anthropic says its Claude AI models also escaped test environments and hacked three organisations. In two cases, Claude exploited vulnerabilities in Internet facing systems and in the third, one of the company's models published a malicious library on pypi. The victim of the third incident was a cybersecurity firm. Anthropic says it reviewed Claude Activity after OpenAI admitted its models hacked hugging face earlier this month. In other news, a hacker has stolen $70 million in Bitcoin from Coldcard hardware wallets. The attacker exploited a vulnerability in the private keys generated by the wallet's firmware. The wallet's maker, Coinkite, has patched the bug and urged cold card owners to update and generate new wallet seeds. Hackers have stolen $6.2 million worth of crypto from South Korean blockchain gaming platform Wemix. The attackers allegedly compromised a smart contract that allowed them to mint and exfiltrate new tokens. The company lost the exact same amount in a separate hack in March 2025. South Korea's consumer agency has ordered online retailer Kupang to compensate users affected by a data breach. Last year, more than 37 million South Koreans had their data stolen in the breach. Affected users will each receive $70 in cash or store credit. The Democratic National Committee was scammed out of $29,000 last February. The fraud posed as Ken Martin, who'd been elected DNC chairman three days earlier. The party caught the error within minutes but only managed to recover $7,000. US Cyber Command will open a Silicon Valley office to build relationships with the local tech sector and take advantage of its innovations, according to the record. The the branch's main goal will be to accelerate the command's cyber weapons and online operations. It will have its own director, but Cybercom has not named anyone yet. The US government is investigating Iranian hacks of public water utility systems. Seven states were hit with the hacks last week, and CISA says water authorities have had to issue boil water notices and revert to manual operations. Initial breaches were reported across 3:30 Minnesota communities last week. Michigan officials said. They were also targeted, but systems remained operational. An attack was also reported in Rapid City, South Dakota. Meanwhile, the Water ISAC group has denied leaking a report to the media about Iran hacking Minnesota water treatment facilities. The group acknowledged the report is authentic but denied sharing it with Wired as the news site's article suggested. The report confirmed for the first time that the hacks were the work of Iranian hackers. It contradicted a public statement from President Donald Trump, who played down the role of Iranian hackers and blamed state authorities. Russian state backed hackers are behind recent hacks targeting hotel WI fi networks globally. Microsoft linked the so called captive crunch attacks to Storm 2945, a cyber unit connected to Russia's foreign intelligence service. The campaign began in May. The hackers modified WiFi gateway captive portals to redirect users to device code and oauth phishing sites, as well as to drop malware on them. Microsoft says the hacks weren't limited to hotels and targeted any organisations with a WI fi captive portal system. AI was used for the operation, but Microsoft didn't provide further details. Malaysian authorities have arrested a 23 year old over SMS blasting the the suspect was detained in Johor Bahru, a city that borders Singapore. Malaysian telcos have been required to block SMS messages that contain links since 2023. Officials suspected an SMS blaster operation after residents reported receiving messages with links. The Ink Ransomware group is breaking into corporate networks using two recent SonicWall zero days. Both bugs were initially exploited by an espionage group in June. They allow attackers to bypass authentication and elev elevate privileges on compromised devices. Sonicwall patched both vulnerabilities on July 14th. At least eight threat actors are now using the Dark Sword iOS hacking framework in the wild. Darksord is one of two iOS hacking kits discovered this year. It leaked online in March and has been adopted by Chinese e crime groups, according to security firm Census. Most of the Dark Sword servers are hosted in Hong Kong. More than 120,000 Android TV boxes are part of a new advertising fraud botnet called Fuyao. The boxes ship with pre installed apps that use common smartphone user agent strings when they load ads behind users backs. Security company Bitsight estimates the botnet is making around $150,000 a day. Apple has restricted the number of reports that security researchers can file in its bug bounty program. The company is alleged struggling to keep up following a deluge of AI assisted bug reports. Researchers who hit their cap will have to wait 30 days before they can file new bugs vetted researchers can request a higher limit. The rufflo AI Agent Harness has patched a bug that allowed attackers to gain root access on the underlying AI servers. The bug is in Ruffalo's MCP bridge, which ships without authentication. Any attacker can query it to run commands on Rufflo's container. The bug has a severity rating of 10 out of 10. A patch shipped last month, a newly disclosed vulnerability in the Ruby on Rails framework can allow attackers to steal a web app's secrets and credentials. The bug impacts apps that use Active storage, a component for interfacing with databases and cloud services. Codenamed kinder rails2shell. The vulnerability doesn't require authentication and can be exploited against default configurations. The Rails project released a patch last week. Google has paused a new AI feature that allowed Google Earth users to generate fake satellite images. The company removed the feature after people generated fake images of missile strikes and spread disinformation. Who could have seen that coming? Iran's military has carried out a missile attack on an AWS data centre in Bahrain. In March, Iran hit three AWS data centres in Bahrain and the uae. Iranian officials said they targeted the company due to its role in supporting US Military in the region. In March, Iran threatened to target US Tech giants in the region if the war continued. And finally, the GitHub security team will now scan all packages published on the NPM portal for malware. Packages with dual use code that perform actions that could be interpreted as malicious will also have to declare their intentions through a new metadata field. GitHub is also removing features from NPM Granular access tokens, also known as Gatts. If the tokens are configured to bypass 2fa, they can't perform any sensitive actions against an account and its repositories. And that is all for this podcast edition. Today's show is brought to you by Promiso Security. Find them@permeso IO. Thanks for your company.