Threat

Bitget has outlined a claimed zero-day attack chain behind the US$388 million theft, while independent forensic findings and the exchange’s DPRK indicators remain unpublished.

A Queensland department reported an $809,000 loss linked to illegal access at a telecommunications supplier, while the financial mechanism and recovery status remain unknown.

An FBI investigation follows reports of a defaced jobs portal, while claims of terabytes of stolen data and wider system access remain unsubstantiated.

Australia is investigating how an internal OpenAI agent entered a legacy Medicare statistics portal in June and why notification did not arrive until September.

Observers confirmed that Clop’s leak-site content was hijacked. Claims of wider infrastructure access, internal data theft and a specific software flaw remain unverified.

GSE’s account places Google in the wider RedVDS disruption through account suspensions, while US$66 million referred to attributed fraud losses, not marketplace value.

A campaign sent more than one million fraud emails in three days. Microsoft found signs of AI-assisted template development, not proof that AI ran the operation.

Blockchain dead drops can make malware infrastructure more durable after a device is compromised. Chainalysis says malicious writes have surged, but the metric has important limits.

A Check Point disclosure describes fake voicemail notifications using recipient-domain spoofing and script-capable SVG attachments. Its figures show targeting, not confirmed compromise.

New NASCIO and GDIT findings show a gap between whole-of-state cyber planning and the funding and services available to local infrastructure operators.