https://vulpine.pw/blog 2026-10-30T12:00:00.000Z https://vulpine.pw/blog/capcom-11-million-customer-records-exposed 2026-10-30T12:00:00.000Z 2026-10-30T12:00:00.000Z doudou

Capcom confirms a data breach affecting over 11 million customer records, including email addresses and personal information.

https://vulpine.pw/blog/zklink-nova-bridge-exploit-drains 2026-10-29T12:00:00.000Z 2026-10-29T12:00:00.000Z tortue974

An attacker submitted a forged batch root, tricking zkLink Nova’s Ethereum bridge into approving withdrawals without matching token burns on Layer 2. The exploit drained ETH, stablecoins and staking tokens from bridge reserves. Initial loss estimates range from $786K to $805K.

https://vulpine.pw/blog/virtualine-seized-by-fbi-data-compromised 2026-10-28T12:00:00.000Z 2026-10-28T12:00:00.000Z doudou

Virtualine has reportedly been seized by the FBI. If you still host data there, migrate as soon as possible and assume your data may be compromised.

https://vulpine.pw/blog/ai-assisted-cyberattack-8-2-million-records-stolen 2026-10-28T12:00:00.000Z 2026-10-28T12:00:00.000Z doudou

Seven suspects allegedly used AI to hack over 90 organizations, steal 8.2 million records, and demand $272,000 in ransom.

https://vulpine.pw/blog/initia-blockchain-halted-after-2-7m-crypto-hack 2026-10-26T12:00:00.000Z 2026-10-26T12:00:00.000Z doudou

A hacker stole $2.7 million in crypto. Initia stopped its blockchain to investigate. INIT tokens were not affected.

https://vulpine.pw/blog/x100-flash-loan-attack-crypto-treasury-theft 2026-10-25T12:00:00.000Z 2026-10-25T12:00:00.000Z doudou

An attacker used a flash loan to take control of X100 and steal $4.85 million in USDT by manipulating token prices.

https://vulpine.pw/blog/cybersecurite-failles-critiques-php-octobre-2026 2026-10-25T12:00:00.000Z 2026-10-25T12:00:00.000Z doudou

Critical PHP vulnerabilities raise global cybersecurity concerns, prompting urgent security updates and highlighting the growing role of AI in detecting and exploiting software flaws.

https://vulpine.pw/blog/thai-police-arrest-chinese-man-3-million-dollar-crypto-scam 2026-10-24T12:00:00.000Z 2026-10-24T12:00:00.000Z doudou

Thai police arrested a Chinese man wanted for a $3 million cryptocurrency investment scam. He used a Cambodian passport to hide his identity in Thailand.

https://vulpine.pw/blog/us-government-websites-encryption-security-risks 2026-10-23T12:00:00.000Z 2026-10-23T12:00:00.000Z doudou

Over 350 US government websites lack key security protections, putting visitors’ private data at risk from hackers and foreign spies.

https://vulpine.pw/blog/nem-token-burn-exploit-820k-usdt 2026-10-22T12:00:00.000Z 2026-10-22T12:00:00.000Z doudou

An attacker used a flaw in NEM’s system to increase its price and steal about $820,000 in USDT from a pool.

https://vulpine.pw/blog/anonymous-trader-coins-crypto 2026-10-21T12:00:00.000Z 2026-10-21T12:00:00.000Z doudou

An anonymous trader turned $848 into a reported $282K by trading $KIMCHI tokens, making a 332x return.

https://vulpine.pw/blog/nigerian-hacker-sentenced-8-years-fraud 2026-10-21T12:00:00.000Z 2026-10-21T12:00:00.000Z doudou

Nigerian hacker Chukwuemeka Amachukwu was sentenced to 8 years in prison for fraud, data theft and fake investment schemes.

https://vulpine.pw/blog/solana-trader-loses-1-million-meme-coins 2026-10-20T12:00:00.000Z 2026-10-20T12:00:00.000Z doudou

Crypto trader Jelitics reportedly lost over $1 million after 12 failed meme coin trades on Solana.

https://vulpine.pw/blog/international-online-fraud-operation-ghana-nigeria 2026-10-20T12:00:00.000Z 2026-10-20T12:00:00.000Z doudou

Authorities in Ghana and Nigeria arrested 28 suspects, removed 3.7 million scam accounts, and identified 117 trafficking victims in an international operation.

https://vulpine.pw/blog/peru-agency-data-leak-14-million-records 2026-10-19T12:00:00.000Z 2026-10-19T12:00:00.000Z doudou

A hacker claims to have leaked 1.4 million records from a Peruvian agency and deleted its database.

https://vulpine.pw/blog/alpscon-staking-rewards-exploit-152k-profit 2026-10-19T12:00:00.000Z 2026-10-19T12:00:00.000Z doudou

AlpsCon lost $355K in USDC rewards after an attacker exploited a public test wallet key, making a $152K profit.

https://vulpine.pw/blog/police-fight-online-child-exploitation 2026-10-19T12:00:00.000Z 2026-10-19T12:00:00.000Z doudou

Police arrested 95 suspects and rescued a young child in a fight against online child exploitation.

https://vulpine.pw/blog/bifi-165k-usdt-exploit-morpho-flash-loan-mev-bot 2026-10-18T12:00:00.000Z 2026-10-18T12:00:00.000Z doudou

A $40.5M Morpho flash loan exploited BiFi’s idle USDT market, with an MEV bot front-running the attacker and draining 165.6K USDT.

https://vulpine.pw/blog/chinese-crypto-laundering-suspect-arrested-in-bangkok 2026-10-17T12:00:00.000Z 2026-10-17T12:00:00.000Z doudou

Thai police detained a 37-year-old Chinese fugitive known as Wu at a luxury home. He allegedly supplied 133 mule accounts and exchanged crypto and foreign currency for criminal groups. The network processed over 500 million yuan around $70 million.

https://vulpine.pw/blog/new-jersey-prosecutor-arrested-over-ai-generated-abuse-material 2026-10-17T12:00:00.000Z 2026-10-17T12:00:00.000Z doudou

Deputy Attorney General Brian Fitzgerald, 51, is accused of creating child sexual abuse material using AI and distributing it through social media. Investigators allegedly linked his accounts and IP addresses to the content. Bail was set at $2 million.

https://vulpine.pw/blog/scammer-loses-4-9m-in-ledger-spy-chip-hack 2026-10-16T12:00:00.000Z 2026-10-16T12:00:00.000Z tortue974

A fraudster who earned millions through fake online job scams moved the proceeds into three Ledger wallets. The devices were compromised by hidden implants that captured recovery phrases. Attackers then drained 60 BTC worth over $4.9M. The wider CryptoBilis attack has reached $102M across 324 wallet

https://vulpine.pw/blog/vesting-exploit-drains-funds-across-four-blockchains 2026-10-15T12:00:00.000Z 2026-10-15T12:00:00.000Z doudou

Attackers created vesting schedules, released tokens, then donated assets and topped up positions. By cancelling them, they exploited a share-accounting flaw to inflate withdrawals and drain funds. 10 tokens were affected across 4 chains. UNCX confirmed its LP lockers remain unaffected.

https://vulpine.pw/blog/three-arrested-after-hurricane-isaias 2026-10-14T12:00:00.000Z 2026-10-14T12:00:00.000Z doudou

Dustin Kelley and Amanda Carr allegedly tricked a woman into letting them charge a phone in her car before stealing it. Their escape ended in a crash after a police chase. Van Gary Spikes Jr. was caught during a separate attempted store break-in. Kelley, Carr and Spikes were all arrested in Florida.

https://vulpine.pw/blog/autheo-exploit-93-million-theo-tokens-sent-to-zynex 2026-10-13T12:00:00.000Z 2026-10-13T12:00:00.000Z doudou

A wallet linked to the Autheo exploit unexpectedly sent 93.5M $THEO worth about $1.1M at the current price to X user Zynex. He says the tokens remain untouched and asked Autheo to publish an official return address so he can send everything back. $THEO plunged roughly 92% after the exploit.

https://vulpine.pw/blog/japan-arrests-six-crypto-money-laundering-case-580k 2026-10-12T12:00:00.000Z 2026-10-12T12:00:00.000Z doudou

Japanese police arrested six suspects accused of laundering ¥91M ($580K) stolen through investment scams. Funds from around 30 victims were allegedly routed through a staffing company’s bank account, converted into crypto and sent to scam operators. The investigation began with a single ¥4.4M transa

https://vulpine.pw/blog/cybersecurity-cyberattack-ahold-delhaize-2026 2026-10-12T12:00:00.000Z 2026-10-12T12:00:00.000Z doudou

A look at the Ahold Delhaize cybersecurity incident on October 12, 2026, and why companies must protect their computer systems against cyberattacks.

https://vulpine.pw/blog/hacker-returns-15000-bnb-to-79thvault-in-rare-crypto-recovery 2026-10-09T12:00:00.000Z 2026-10-09T12:00:00.000Z tortue974

An attacker drained 16,249 BNB from 79thVault after compromising its operator key. Following on-chain negotiations, 15,000 BNB was returned to the project’s recovery address less than 24 hours later. The exploiter kept 1,249 BNB — 7.7% of the stolen funds — as a bounty.

https://vulpine.pw/blog/co-creator-dark-web-marketplace-sentenced-40-years-federal-prison 2026-10-08T12:00:00.000Z 2026-10-08T12:00:00.000Z tortue974

Raheim Hamilton, known as “Sydney” and “ZeroAngel,” was sentenced to 40 years for operating Empire Market, which processed over 4M dark-web transactions worth $430M. The court also imposed a $5M fine and ordered the forfeiture of 1,230 BTC, 24.4 ETH and three properties. Drug sales alone totaled nea

https://vulpine.pw/blog/trader-frogmanhaha-s-wallet-suspected-of-being-hacked-losing-4m 2026-10-07T12:00:00.000Z 2026-10-07T12:00:00.000Z tortue974

Two wallets linked to trader Frogman were drained while he was in Singapore. The attacker stole 1.43M BP ($1.77M), 13.96M MARSCOIN ($1.55M), 3.7M CASHCAT ($515K) and other assets. The tokens were swapped into ETH, BNB and SOL, then routed through Privacy Cash and Chainflip. Frogman confirmed the th

https://vulpine.pw/blog/zachxbt-says-he-fronted-349-700-to-infiltrate-alleged-laundering-ring 2026-10-05T12:00:00.000Z 2026-10-05T12:00:00.000Z tortue974

After the $1.5B Bybit hack, ZachXBT contacted “Jimmy Green,” who openly offered to swap stolen USDT. On March 6, 2025, ZachXBT funded a new Ethereum wallet with 349.7K USDC for the operation. Jimmy supplied a Tron address, funded by an Ethereum wallet directly linked to Bybit exploit proceeds.

https://vulpine.pw/blog/south-korea-growing-cyber-threats-bank-attacks 2026-10-04T12:00:00.000Z 2026-10-04T12:00:00.000Z doudou

South Korea has launched emergency cybersecurity checks after several major banks reported cyber incidents, raising concerns over a wider attack campaign targeting the financial sector.

https://vulpine.pw/blog/greece-police-arrest-17-pyramid-scheme-suspects 2026-10-04T12:00:00.000Z 2026-10-04T12:00:00.000Z doudou

Greek police arrested 17 suspects accused of running a pyramid scheme that promised to double investors’ money in 50 days. The network allegedly attracted at least 10,000 people before withdrawals were blocked. Nine detainees are military personnel. Police seized €295,090 in cash and dozens of elect

https://vulpine.pw/blog/fortimail-zero-day-cve-2026-104286 2026-10-02T12:00:00.000Z 2026-10-02T12:00:00.000Z doudou

A critical FortiMail zero-day is being actively exploited, allowing unauthenticated attackers to write arbitrary files on vulnerable systems.

https://vulpine.pw/blog/ai-agents-hack-us-canadian-government-websites 2026-10-01T12:00:00.000Z 2026-10-01T12:00:00.000Z doudou

Autonomous AI agents attempted to exploit vulnerabilities in U.S. and Canadian government websites while searching for publicly available information.

https://vulpine.pw/blog/killsec-ransomware-group-dismantled-operation-killswitch 2026-10-01T12:00:00.000Z 2026-10-01T12:00:00.000Z doudou

An international police operation has disrupted the KillSec ransomware group, with three suspects arrested and more than 110 TB of stolen data secured.

https://vulpine.pw/blog/medela-data-breach-424000-accounts-exposed 2026-09-30T12:00:00.000Z 2026-09-30T12:00:00.000Z doudou

**Medela data breach exposes nearly 424,000 accounts, with professional and personal information reportedly leaked in an incident linked to ShinyHunters.**

https://vulpine.pw/blog/apple-zero-day-coregraphics-security-update 2026-09-29T12:00:00.000Z 2026-09-29T12:00:00.000Z doudou

Apple fixes a CoreGraphics zero-day vulnerability linked to targeted attacks, highlighting the importance of fast security updates.

https://vulpine.pw/blog/citrix-netscaler-security-alert-fast-response 2026-09-28T12:00:00.000Z 2026-09-28T12:00:00.000Z doudou

Citrix NetScaler vulnerabilities highlight the importance of fast patching, system monitoring, and effective cybersecurity response.

https://vulpine.pw/blog/citrix-netscaler-two-critical-zero-day-vulnerabilities-active-exploitation 2026-09-27T12:00:00.000Z 2026-09-27T12:00:00.000Z tortue974

Citrix has confirmed the active exploitation of two critical zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway, both rated CVSS 9.5 and potentially enabling remote code execution. Patches are now available, but organizations should also investigate systems for signs of prior compromise

https://vulpine.pw/blog/arizona-court-system-cyberattack-sensitive-data-exposure 2026-09-27T12:00:00.000Z 2026-09-27T12:00:00.000Z doudou

Arizona’s court system has suffered a cyberattack, potentially exposing sensitive personal information belonging to many residents, including people protected by court orders.

https://vulpine.pw/blog/google-gemini-leaked-breach 2026-09-26T12:00:00.000Z 2026-09-26T12:00:00.000Z Doudou

Gemini has been hacked and its data has been corrupted!

https://vulpine.pw/blog/revolut-data-breach-false-government-requests 2026-09-25T12:00:00.000Z 2026-09-25T12:00:00.000Z doudou

Revolut is handing over data to a scammer posing as the government! This breach is incredibly ingenious and calls into question a company’s security measures! Are we safe? Or does the government really go out of its way to collect our data that often?

https://vulpine.pw/blog/payy-network-hentikan-operasi-setelah-exploit-usdc-1-92juta-dolar 2026-09-24T12:00:00.000Z 2026-09-24T12:00:00.000Z tortue974

Payy Network Halts After $1.83M Exploit An attacker exploited Payy’s Ethereum bridge through a malicious verifyRollup transaction at 04:21 UTC. The stolen USDC was routed through Railgun, swapped for about 683 ETH and split across multiple wallets. Payy suspended deposits, withdrawals, transfers an

https://vulpine.pw/blog/muse-meta-amazon-chatbot-iadominence-openai-google-risk 2026-09-22T12:00:00.000Z 2026-09-22T12:00:00.000Z doudou

Is Amazon in danger, and are we next on the list? Will Meta be the first to take center stage, or has it been this way for the past few years?

https://vulpine.pw/blog/openai-breached-anthropic-ai-opus-5-cyberattack 2026-09-19T12:22:16.994Z 2026-09-19T12:22:16.994Z doudou

OpenAI was reportedly compromised during a security research project using Anthropic’s Claude Opus 5, highlighting how AI is making sophisticated cyberattacks faster, cheaper, and more accessible.

https://vulpine.pw/blog/london-crypto-theft-faceid 2026-09-18T04:34:48.381Z 2026-09-18T04:34:48.381Z doudou

$200K Crypto Theft After Phone Stolen in London ⠀ A victim says thieves stole their iPhone near London Bridge, bypassed Face ID and drained a Phantom wallet. The affected wallets reportedly held 0.6% of ALLINU’s supply, which was sold in two large transactions. Confirmed losses are near $200K, while

https://vulpine.pw/blog/colombia-narco-trafic-crypto- 2026-09-12T18:37:58.713Z 2026-09-12T18:37:58.713Z doudou

Colombia Arrests Five in Crypto Laundering Case ⠀ Colombian prosecutors arrested five people accused of laundering more than 2.3 billion pesos, reportedly valued at around $580M, in drug-trafficking proceeds. The network allegedly used shell companies, bank transfers and large USDT transactions to h

https://vulpine.pw/blog/hacked-ukrainian-prison-oleksii-cryto 2026-09-12T18:35:00.796Z 2026-09-12T18:35:00.796Z doudou

Ukrainian national Oleksii Lytvynenko was sentenced to four years in prison for helping Conti attack at least 12 companies and extort victims who paid over $150M in Bitcoin ransom.

https://vulpine.pw/blog/telegram-bot-money-bot 2026-09-11T05:21:28.810Z 2026-09-11T05:21:28.810Z doudou

Telegram bots made a lot of money

https://vulpine.pw/blog/openai-confirms-wiki-incident-says-its-working-on-a-framework-for-more-disclosure 2026-09-08T17:02:41.310Z 2026-09-08T17:02:41.310Z doudou

OpenAI confirmed that its AI agents escaped a testing environment and hijacked a German wiki forum, using it as a message board for other agents. The admission follows reports that OpenAI sat on the incident for weeks while handling a separate breach in which its agents compromised Hugging Face's s