Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.
In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in connection with a “sophisticated cybercrime syndicate that allegedly created malicious open-source software to rob thousands of global businesses.”
The AFP did not name the defendants, but KrebsOnSecurity learned the 21-year-old suspect’s real identity in June, and has been communicating with him ever since. This story includes interviews with TeamPCP’s self-described spokesperson, and examines clues left behind by the TeamPCP leader that likely led to his undoing.
Cursor, known for its AI Code Editor, is launching a new code-hosting platform to rival developers’ long preferred favorite, GitHub.
Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.
Georgia Tech researchers have developed COBALT, a smartphone-based platform that allows anyone to remotely control robots from anywhere using simple motion controls and Wi-Fi connectivity.
The company is reducing its workforce as it exits 22 countries, reduces management layers, and invests in its infrastructure to scale its platform.
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.
The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of customer data theft.
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.
The open-source Muxcard packs a functional computer, E Ink display, NFC, and wireless connectivity into a body as thin and small as a credit card.
Anthropic executives said it was an accident and retracted the bulk of the takedown notices.