The FBI investigated a US woman who helped hackers pose as remote workers, sending secrets and millions of dollars to North Korean agents.

The infamous ScatteredSpider ransomware group is using VMware instances to target critical infrastructure organizations in the US, researchers have warned. Security researchers from Google Threat Intelligence Group (GITG) have found the criminals are targeting critical infrastructure firms, but also retail, airline, and insurance industries.

Hackers in recent weeks have exploited flaws in SharePoint, a document management system developed by Microsoft Corp., to try to steal sensitive data from hundreds of victims.

Passwords, cryptocurrency keys, private messaging tokens, browser session data and more are open to any hacker willing to pay just $30 a month.

The company said state-backed hacking groups were breaching systems through flaws in SharePoint, which is used by the U.S. government and companies around the world.

Wagenius was an active-duty US soldier stationed at bases in South Korea and Texas. In 2024, he helped hack telecom companies and obtained call record data on Donald Trump and Kamala Harris, which he posted in November under the "kiberphant0m" name.

Unidentified hackers recently compromised a major intelligence website used by the CIA and other agencies to submit details of sensitive contracts, according to the National Reconnaissance Office, the spy satellite service that runs the site.