CrowdStrike

FBI

2026-10-14 18:14:14

FBI and CrowdStrike dismantle more than 40 North Korean laptop farms in Texas

The FBI, working with cybersecurity firm CrowdStrike, has dismantled more than 40 so-called laptop farms in Texas that were allegedly operated on behalf of North Korean actors, with more than 200 devices seized in the operation. The case highlights how remote work arrangements have been used to bypass corporate security checks and move illicit funds despite international sanctions. According to the report, North Korean operatives posed as remote IT workers and relied on U.S.-based helpers to host equipment domestically, creating the appearance that the work was being performed from inside the United States. U.S. authorities warned that anyone providing device hosting or assisting these remote fraud schemes could face criminal liability. The report also said this type of activity may generate as much as $500 million a year. Amazon previously detected one such intrusion attempt after identifying an unusual 110-millisecond keyboard input delay, which helped trace the actual operator to a location outside the country. From 2019 to 2025, the broader network allegedly obtained more than $3 million from 70 companies, while prosecutors have already charged multiple U.S. citizens and foreign nationals tied to the scheme.

110

CrowdStrike

2026-10-10 20:37:18

CrowdStrike urges shareholders to reject Tutanota mini-tender offer

CrowdStrike Holdings, Inc. said shareholders should not respond to a mini-tender offer launched by Tutanota LLC, stressing that the company has no affiliation with the bidder. The offer seeks to buy up to 500,000 shares of CrowdStrike common stock for $260 per share in cash, representing less than 0.05% of the company’s outstanding common shares. CrowdStrike said the terms are unfavorable to existing shareholders. One condition requires the company’s closing share price on the last trading day before the offer expires to be above $260 per share. Unless Tutanota waives that condition, shareholders who tender could end up selling their stock below the market price. The bidder also retains the right to delay payment and extend the offer period. The company said the offer is scheduled to expire at 5:00 p.m. Eastern Time on Oct. 19, 2026, and shareholders who have already tendered their shares may withdraw them before the deadline. CrowdStrike also pointed to U.S. Securities and Exchange Commission guidance on mini-tender offers, which cover less than 5% of a company’s shares and are not subject to the same disclosure and procedural requirements as larger tender offers. The company urged investors to check current market prices and consult brokers or financial advisers before making any decision.

250

Anthropic

2026-10-09 19:51:52

Axios says AI executives are rehearsing for the public and political fallout from a catastrophic AI incident

Senior executives at AI companies including Anthropic and OpenAI have been privately rehearsing how to respond if a catastrophic AI event triggers a public backlash and a political crisis, according to Axios. The scenario they fear most involves large-scale cyberattacks severe enough to disrupt banks, the internet, electricity, and water systems. Axios reported that some industry figures believe a major incident could arrive within the next 6 to 12 months, though OpenAI said its work is a preparedness exercise rather than a prediction that such an event will happen. Anthropic declined to comment. The reported planning includes worst-case red-team exercises and efforts to brief members of Congress quickly. Axios said the executives understand that major regulation is difficult to pass now, but they want to shape the laws and policy choices US leaders make after a first disaster. The report also cited a string of recent AI-related security incidents involving OpenAI, Anthropic, Hugging Face, government information, and a CrowdStrike assessment tied to attacks on South Korean banks.

240

Anthropic

2026-10-09 17:56:20

Anthropic launches free Cyber Mission AI scanner for critical infrastructure

Anthropic has introduced Cyber Mission, a new initiative aimed at protecting critical infrastructure and open-source software from cyberattacks. According to The Decoder, the program will work with partners including CrowdStrike and Palo Alto Networks to help secure power grids and water systems. As part of the effort, Anthropic is offering a free AI-powered scanner that automatically checks open-source projects for vulnerabilities. The company expects the tool to deliver accuracy above 90%. The announcement centers on infrastructure protection and automated vulnerability detection, with the stated goal of improving defenses for systems that are often exposed to cyber risk.

270

Federal Reser

2026-10-08 13:56:35

Fed minutes flag stronger AI buildout as Greece proposes 10% crypto capital gains tax

WuBlockchain’s daily crypto briefing highlighted five developments spanning monetary policy, labor data, protocol security, tax policy, and cybercrime. Minutes from the Federal Reserve’s September FOMC meeting said most participants saw another rate hike by year-end as potentially appropriate. Several participants said policy rates were either not restrictive or only mildly restrictive, while some pointed to greater upside inflation risk in recent months. Staff also raised their outlook for growth and employment, with GDP expected to run above potential through 2028 and unemployment staying below its longer-run level through 2029. The minutes also said several participants viewed the scale and speed of AI buildout as continuing to exceed expectations, with broader agreement that AI investment could lift productivity and potential output over the next few years, though the size and timing remain uncertain. Separately, U.S. initial jobless claims for the week ending Oct. 3 came in at 197,000, below the 200,000 consensus, while the prior reading was revised to 199,000 from 197,000. Ethereum co-founder Vitalik Buterin warned that AI-driven progress in mathematics could weaken the practical security of lattice-based cryptography within two years and said users should not rush to move funds. Greece opened public consultation on a crypto tax bill that would impose a 10% capital gains tax on individual crypto sales. CrowdStrike, meanwhile, said an unidentified hacker used LLMs and AI tools to target South Korean financial institutions, with South Korean media estimating that data tied to about 68,000 people was exposed.

270

CrowdStrike

2026-10-08 12:55:25

CrowdStrike says hacker used LLMs and AI pentesting tools in attacks on South Korean financial firms

CrowdStrike said in an intelligence report that an unidentified hacker combined large language models with ARTEX, a domestic open-source AI penetration testing tool, to carry out targeted cyberattacks against multiple South Korean financial institutions between late September and early October. According to the report, analysis of an exposed open directory linked to the attacker showed a dual-server setup centered on a Hong Kong IP address. CrowdStrike said the operator used Claude Code, GLM-5.3, Grok 4.6, and DeepSeek v4.1-flash accessed through an API proxy to orchestrate the attack workflow. The report also said the hacker asked Claude how to monetize leaked South Korean data in Telegram groups. Separately, South Korean media estimated that at least seven financial institutions were hit, including KB Kookmin Bank, Shinhan Bank, and Hana Bank. Around 68,000 people had personal data exposed, including sensitive details such as annual income and loan limits.

320

CrowdStrike

2026-10-08 11:24:43

CrowdStrike says attackers in South Korean bank data breaches used AI tools and asked Claude about selling stolen data

CrowdStrike said attackers tied to recent data breach incidents involving multiple South Korean banks used ARTEX, an open-source AI penetration testing tool developed in China, and also relied on models including DeepSeek, GLM-5, and Grok during the operation. According to the report, exposed Claude Code session logs from an open directory on an attacker-controlled server showed the threat actors asking how to sell stolen South Korean data and how to find related Telegram trading groups. The same session history also contained a draft resume for a "security researcher" that listed an address in Maoming, Guangdong, an age of 26, and a Telegram contact. CrowdStrike said those details likely belong to the attacker. The report comes as South Korean President Lee Jae-myung has already raised public concern in a cabinet meeting over the use of AI in hacking attacks.

280

Foreign Minis

2026-10-08 10:43:21

China foreign ministry responds to AI-linked cyberattack allegation involving South Korean financial institutions

China’s foreign ministry commented on allegations tied to artificial intelligence and cyberattacks during a regular press briefing on Oct. 8. Foreign Ministry spokesperson Mao Ning was asked by a Reuters reporter about claims from U.S. cybersecurity company CrowdStrike that Chinese individuals and related entities used AI tools to attack South Korean financial institutions. Mao said she was not familiar with the specific case. She added that, as a matter of principle, China has consistently opposed hacking activities and combats them in accordance with the law. Mao also said China opposes the spread of false information for political purposes. On the broader issue of AI and cybersecurity, she said artificial intelligence is having a profound impact on cyber defense and cyber risk, and called on the international community to strengthen cooperation and dialogue, develop new international rules, and jointly safeguard cybersecurity.

280