GoKawiil
Tech News
Security researchers uncovered a North Korean state-linked hacking operation that impersonated job recruiters to trick victims into installing malware, ultimately compromising roughly 30,000 devices across multiple countries. The campaign used fake hiring processes and interview-related documents as delivery mechanisms for malicious software.
Cybersecurity agencies from the U.S., U.K. and Netherlands, alongside the FBI, issued a joint advisory exposing an Iranian state-linked campaign using Windows malware called CHOSEN BRICK to spy on dissidents, journalists and activists. Attackers pose as trusted contacts or tech support over WhatsApp and Telegram, luring victims into launching disguised fake apps that secretly install the spyware and evade Windows Defender.
A year-end review of 2026's major hacks highlights an unresolved controversy over the Department of Government Efficiency's access to Social Security Administration data. Ongoing federal lawsuits and a whistleblower's claims allege DOGE staff uploaded a live copy of the Social Security database to an unsecured third-party server, potentially exposing sensitive personal information tied to most living Americans. The broader roundup also notes a year marked by ransomware, nation-state attacks on infrastructure, and data weaponization by governments.
As artificial intelligence enables more sophisticated cyberattacks, companies are increasingly turning to experienced cybersecurity professionals to defend their systems rather than entry-level staff. Industry observers warn this trend could create a long-term skills gap if younger workers aren't given opportunities to develop expertise in parallel.
Blockstream's Liquid Bitcoin sidechain confirmed that hackers withdrew about 4,000 BTC—roughly 95% of its federation wallet, worth roughly $320 million—on September 6. The attackers embedded an on-chain message calling themselves 'whitehats,' asking Liquid to patch the vulnerability before they return the funds, and Liquid has since suspended transactions while shifting communication to an encrypted channel.
Liquid Network, a Bitcoin-based payments and settlement platform, disclosed on Sunday that roughly 4,000 of the 4,200 bitcoin held in its Federation wallet were withdrawn without authorization, totaling about $320 million. The network described the perpetrators as "purported white-hat hackers" and warned that user wallets on the platform would be affected by the breach.
Berlin's government has been hit by a hacking incident in which attackers are reportedly demanding a ransom, according to Mayor Kai Wegner. Wegner said state police, prosecutors and federal security agencies are urgently investigating who is behind the breach and determining what data was compromised.
Manchester Airports Group revealed that attackers infiltrated its systems and extracted customer information tied to Wi-Fi registrations, car park bookings, lounge access and Fast Track services at Manchester, Stansted and East Midlands airports. Stolen data reportedly includes email addresses, phone numbers, vehicle registration numbers and postcodes, though no payment card details were taken. The company has paused its online booking management tool and shifted customers to phone support while it investigates with outside cybersecurity help and law enforcement.
Nation-state hacking groups linked to Russia have shifted their phishing campaigns away from email and toward messaging apps like Signal and WhatsApp to target European Union officials. In response, EU governments are reportedly working to move away from these popular consumer messaging platforms for sensitive communications.
Taiwanese prosecutors have charged nine individuals in connection with an alleged scheme to illegally smuggle AI servers, according to reporting on the case. The same roundup notes the U.S. has sanctioned suspected Iranian hackers on what officials called 'economic D-Day,' and Alabama has issued a subpoena to OpenAI over a cyberattack tied to its systems.