Cryptohack Roundup: Android Chips Hot Wallet Attack

Rashmi Ramesh • December 11, 2025

This week, Ledger flagged physical attack risks to Android hot wallets, a 700M euro fraud network was dismantled, a suspect in the $243M Genesis theft was reportedly detained and a member of a $263M crypto scam pleaded guilty. Two men arrested in a Vienna crypto-linked killing.

Blockchain & Cryptocurrency

Securing EMV: 'More Is Less' for Security, Researchers Find

Latest

Advanced SOC Operations / CSOC

Harness Nets $240M at $5.5B Valuation to Advance DevSecOps

Michael Novinson • December 11, 2025

With $200 million in Series E funding and a new $5.5 billion valuation, Harness will scale its AI-powered platform for security, compliance and reliability in software development. The investment will support R&D into AI agents, testing, cost optimization and security for AI workloads.

Fraud Management & Cybercrime

Checkmarx Purchases Tromzo to Boost AI Security Automation

Michael Novinson • December 9, 2025

Checkmarx acquired AI security startup Tromzo to jumpstart its roadmap for agentic application security. The deal gives Checkmarx a ready-built platform and team focused on enterprise-grade triage and remediation agents designed to streamline vulnerability management.

Iran Hackers Take Inspiration From Snake Video Game

David Perera • December 2, 2025

Iranian nation-state hackers took inspiration from a mobile phone time-killing mainstay, say security researchers who spotted hackers downloading malware masquerading as the Snake video game. A callback to the game isn't nostalgia, say researchers at Eset.

Artificial Intelligence & Machine Learning

Ads Without Eyeballs: Online Shopping's AI Agent Problem

Rashmi Ramesh • December 1, 2025

The online retail industry spent decades honing how to nudge people into clicking the buy button. Now it faces a customer who doesn't want anything at all: the artificial intelligence shopping agent. Agentic commerce could hollow out retail media and force a shift in how platforms monetize.

Blockchain & Cryptocurrency

Cryptohack Roundup: WLF Scrambles to Secure User Funds

Rashmi Ramesh • November 27, 2025

This week, World Liberty Financial scrambles to secure user funds, the U.K.'s Serious Fraud Office arrests two people over a $28M Basis Markets rug-pull probe, a Gana Payment hack drains $3.1M and Crypto Dispensers weighs a $100M sale following money-laundering charges against its CEO.

Endpoint Security

Asus Routers Hacked in 'WrtHug' Campaign

David Perera , Greg Sirico • November 19, 2025

Suspected Chinese cyberespionage hackers have commandeered tens of thousands of Asus routers in an operation showing a heavy emphasis on infecting devices stationed in Taiwan. The campaign tracks with reports that Beijing is actively pressing unpatched routers into ORB networks.

Cryptocurrency Fraud

US Strike Force Takes Aim at Southeast Asian Scam Centers

Suparna Goswami • November 13, 2025

The U.S. Attorney for the District of Columbia announced the launch of the Scam Center Strike Force to dismantle criminal networks behind romance bait scams. The initiative targets sophisticated transnational criminal organizations based in Southeast Asia including Cambodia, Laos and Burma.

Cyber Insurance

Cyber Risk Redefines the Bottom Line for FIs

Anna Delaney • November 13, 2025

FIs face rising cyber complexity as threat actors evolve and insurers raise the bar. David Anderson, vice president of cyber at Woodruff Sawyer, a Gallagher company, explains how proactive defense, governance and privacy controls define the new economics of cyber risk.

Security Operations

Palo Alto Networks Bets Big on Agentic AI

Michael Novinson • October 28, 2025

With new products set to launch, Palo Alto Networks is expanding its AI cybersecurity footprint. Chairman and CEO Nikesh Arora introduced the AgentiX platform, a retooled cloud approach, identity enhancements and a deal making Palo Alto the core security provider for Oracle Cloud.

Identity & Access Management

JumpCloud Acquires Breez to Enhance Access Control Strategy

Michael Novinson • October 23, 2025

Breez's approach to identity threat detection and data classification made it a strategic fit for JumpCloud, which aims to fully integrate ITDR into access workflows. The deal follows the Stack Identity acquisition and adds product leadership and engineering talent.

Agentic AI

Defakto Raises $30.75M to Lead Non-Human Identity Space

Michael Novinson • October 21, 2025

With $30.75 million in Series B funding, Defakto aims to strengthen non-human identity security across AI workloads and cloud platforms. The Silicon Valley-based startup plans to deepen discovery, governance and enterprise integrations, while expanding its go-to-market strategy.

Cryptocurrency Fraud

US Blacklists Huione Group for Money Laundering

David Perera , Chris Riotta • October 14, 2025

A Cambodian company at the center of Southeast Asian cybercrime is officially banned from the dollar settlement system, the U.S. Department of Treasury said Tuesday. Treasury said the Huione Group laundered at least $4 billion in illicit proceeds between August 2021 and January 2025.