Breaches, disclosed vulnerabilities, the crews behind them and the defenses that hold. Threat intelligence written for people who have to act on it before lunch.
cyber.wyrenews.com
Money moves through other people's systems today, and that is where the damage lands. BleepingComputer reports Crédit Mutuel Arkéa suspended systems after a service provider breach let attackers push through up to $133 million in fraudulent transactions, a reminder that the weak point is rarely the bank itself. CTM360's research, also via BleepingComputer, works the same seam from the consumer side: fake gift card giveaways borrow trusted brand names and affiliate networks to harvest personal data, no breach required, just borrowed trust.
Against that, SecurityWeek covers Brava Security's exit from stealth with $15 million in funding, built to generate the telemetry a real attack would produce so defenders can find their gaps before someone else does. The pairing is the day's only real line: two stories about attackers exploiting trust in third parties and one about a startup betting that simulating the attacker is the fix.
Generated from the headlines on this desk and published under the newsroom's byline. Everything below it is other publications' reporting, linked back to them. How Wyre works.
Updated 3 hours ago
More on the wire
SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacksBleepingComputerRunaway AI hacking agent behind WorkOS breach after escaping sandboxBleepingComputerFriday Squid Blogging: New Jurassic Squid PredecessorsSchneier on SecurityUK Wades Into Tech Sovereignty Amid AI Policy ChangesDark ReadingOpenAI's new GPT-6 Cyber AI finds 81 Firefox flaws, 948 Linux bugsBleepingComputerMedical services company settles with 4 states over 2023 hack of sensitive patient recordsThe RecordCertificate authority DigiCert reports data breach involving business customer infoThe RecordFake security tools on GitHub push backdoors and infostealersBleepingComputerJapan Announces Emergency Cybersecurity Package Following a Wave of AttacksSecurityWeekAI Gave Your Incident Archive a Second JobDark ReadingAuthorities accuse trio of using AI deepfakes to defraud $129M from businessesCyberScoopQNAP says hackers breaching NAS devices in Plex2Shell attacksBleepingComputerFBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackersThe RecordInstalling the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last TimeThe Hacker NewsVeeam warns of Software Appliance boot failures on AMD EPYC hostsBleepingComputerHackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on HoneypotThe Hacker NewsIMSI vs IMEI: What Your Phone Broadcasts and Who Can Read ItBleepingComputerOpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux ExploitsThe Hacker NewsPinpointing Location of Videos from Background Airplane SoundsSchneier on SecurityIn Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within DaysSecurityWeekCEO-spoofing scammers used AI to help steal more than $100 million, feds sayThe RecordChainalysis says breach exposed credentials for all customersBleepingComputerDigiCert Data Breach Impacts Business Customer InformationSecurityWeekWhy Europe's Freezer Hacks Spread So Far, So FastDark ReadingOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSecurityWeekUS Agencies Urge Organizations to Harden Refrigeration ControllersSecurityWeekGrocery Giant Ahold Delhaize Estimates Financial Toll of October CyberattackSecurityWeekD-Link warns of multiple zero-days in DGS-3130 Series switchesBleepingComputerResearchers Find Residential Proxies on White House NetworkSecurityWeekOpenSSH Rushes Patches for ‘SSHole’ Authentication BypassSecurityWeekMicrosoft Paint RCE Fix Now Available, but Windows Update Won't Deliver ItThe Hacker NewsMalicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' ComputersThe Hacker NewsThe Flood is Coming And The Pipes Were Already FullThe Hacker NewsWyre's own writing on this beat
In May 2025 Unit 42 simulated a ransomware operation from initial compromise to data exfiltration in 25 minutes, calling it a 100x increase in speed powered entirely by AI. The 25 minutes is the number that gets quoted and it is the less important half. The important half is what the exfiltration agent did when a control worked: blocked mid-transfer, it self-prompts, switches to embedding the data in outbound OneDrive syncs, and resumes. A control fired, caught a live exfiltration, stopped that channel, and bought nothing. Defensive architecture has never assumed controls hold, only that a control which fires buys time, and that assumption carries the whole response function. Nine months later Unit 42's incident report, drawn from 750 real intrusions across 50 countries, put the fastest observed attackers at 72 minutes from access to exfiltration, four times faster than the year before. Meanwhile 90 percent of surveyed security leaders are confident of their recovery objectives and 28 percent of ransomware victims fully recovered their data. Why confidence is being reported as evidence, why recovery quietly became the primary defence, and the unglamorous weekend exercise that turns a target into a fact.
6 min readSilent patches and secret supplier bans share the same logic: keep the public in the dark. Zimbra's 270 breached servers show what that logic costs.
6 min readDisclosed vulnerabilities and what is actually being exploited. Breaches, and who is behind them. Ransomware crews, their tooling and their targets. The policy and regulation that lands on security teams. If it changes what a defender does this week, it belongs here.
Every headline is the publisher's own, with the source and the time it went out. Links go direct to the original reporting, never through an aggregator. Wyre carries headlines and attribution only, never article text.
The desk publishes a standard RSS feed, so it works in whatever reader you already use.