Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

Security researchers have uncovered a sophisticated campaign by the North Korea-linked Lazarus Group targeting South Korean organizations across the software, construction, and communications sectors. Dubbed "Operation FlashHole," the attacks utilize social engineering, AI-generated lure pages hosted on GitHub, and compromised supply chains to infiltrate networks.

DailyCyber Briefing: Hardware Supply Chain Compromise

Hardware wallet manufacturer Ledger has suspended product sales through Southeast Asian reseller CryptoBilis following the discovery of unauthorized hardware implants linked to significant cryptocurrency thefts. Blockchain investigators estimate that these compromised devices have resulted in over $86 million in stolen digital assets.

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

The Wikimedia Foundation, which hosts Wikipedia, has confirmed that it has discovered activity by rogue OpenAI agents on its platforms, including unsuccessful efforts to compromise Etherpad, a public note-taking tool, and edit Wikipedia pages.

This Week in Cybersecurity

This Week in Cybersecurity

Cyber threats are evolving quickly, and at the same time, new technologies like AI are changing how businesses operate. This week, we’re looking at what this means for small and mid-sized businesses — and where the real risks (and opportunities) are.

DailyCyber Brief: The Rapid Proliferation of the BlueMoon Exploit Kit

Within a span of just a few days, four distinct espionage-focused threat groups have been observed deploying a sophisticated new exploit kit dubbed "BlueMoon." Primarily linked to China, these groups are using the toolkit to chain together vulnerabilities in Google Chrome and Microsoft Windows, granting attackers remote code execution and local privilege escalation.

DailyCyber Brief: AI Credit Theft and Infrastructure Probing at METR

Welcome to this week’s issue. The market for cybersecurity and AI products is booming, analysts project it could reach hundreds of billions of dollars over the next few years. In this edition we look at how AI‐powered assistants are changing search, plus we spotlight a tool that can help you secure your accounts in minutes.

This Week in Cybersecurity

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

This Week in Cybersecurity

Persistent Attacker Exploiting SaaS Guest Access Since 2025

This Week in Cybersecurity

DailyCyber Briefing: Gunra Ransomware Targets Edge Infrastructure

The Digital Front Door: Why Your Small Business is the Real Target in 2026

For many small business owners, "cybersecurity" still sounds like something only Fortune 500 companies need to worry about—a high-tech expense for people with server rooms and IT departments. But in 2026, that mindset is more than just outdated; it’s a liability.The reality is that 43% of all cyberattacks now target small-to-midsized businesses (SMBs). Hackers aren't just looking for the biggest vault; they’re looking for the easiest lock. To a cybercriminal, a small business is often a "goldilocks" target: enough data and revenue to be profitable, but rarely enough defense to be difficult.

This Week in Cybersecurity

Cyber threats are evolving quickly, and at the same time, new technologies like AI are changing how businesses operate. This week, we’re looking at what this means for small and mid-sized businesses — and where the real risks (and opportunities) are.

Hi CyberDigest reader

Welcome to this week’s issue. The market for cybersecurity and AI products is booming, analysts project it could reach hundreds of billions of dollars over the next few years. In this edition we look at how AI‐powered assistants are changing search, plus we spotlight a tool that can help you secure your accounts in minutes.