VulnHub

Real-time Cybersecurity News

Critical

Authorities accuse trio of using AI deepfakes to defraud $129M from businesses

CyberScoop
Actively Exploited

Overview

Authorities have charged three middle-aged men for allegedly using AI deepfake technology to impersonate CEOs and lawyers, defrauding businesses of $129 million. The attackers specifically targeted accounting departments, convincing employees to transfer large sums of money under false pretenses. This scheme raises significant concerns about the security measures in place for verifying identities in financial transactions. As AI technology becomes more sophisticated, businesses need to enhance their verification processes to prevent similar fraud. The incident serves as a stark reminder of the potential for AI tools to facilitate criminal activities, making it crucial for companies to stay vigilant against such tactics.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Action Required: Companies should implement stricter identity verification protocols and training for employees on recognizing deepfake technology and other phishing attempts.
  • Timeline: Newly disclosed

Original Article Summary

The middle-aged men allegedly targeted accounting staff at victim companies and impersonated CEOs and lawyers to trick victims into sending large wire transfers. The post Authorities accuse trio of using AI deepfakes to defraud $129M from businesses appeared first on CyberScoop.

Impact

Not specified

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Companies should implement stricter identity verification protocols and training for employees on recognizing deepfake technology and other phishing attempts.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

Hackers pull off $133 million French bank heist via service provider

BleepingComputer

Crédit Mutuel Arkéa, a French cooperative bank, was hit by a cyberattack that led to fraudulent transactions totaling approximately $133 million. The breach was carried out through a service provider, which allowed hackers to exploit vulnerabilities and siphon off funds. In response to the incident, the bank has suspended certain systems to investigate the breach and prevent further losses. This significant heist raises concerns about the security measures in place for financial institutions and the potential risks posed by third-party service providers. Customers and stakeholders are likely to be anxious about the safety of their funds and personal information following such a large-scale attack.

Nov 7, 2026

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

SecurityWeek

SonicWall has released patches for a significant vulnerability in its SonicOS software, identified as CVE-2026-19868. This flaw allows attackers with credentials from different login methods to bypass SAML (Security Assertion Markup Language) checks, including those that enforce multi-factor authentication (MFA). This means that unauthorized users could potentially gain access to VPN logins, posing a serious security risk for organizations relying on SonicWall's VPN services. The issue is particularly concerning because it undermines the effectiveness of MFA, a key security measure. Users of SonicWall products are urged to apply the latest patches to secure their systems against potential exploitation.

Nov 7, 2026

Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub

The Hacker News

A recent report from software security company Apiiro has revealed that sensitive information, including passwords and API keys, is publicly accessible in 1,122 GitHub repositories. This issue arises from a feature in Claude Code, Anthropic's AI coding assistant, where users can opt to save commands by selecting 'Yes, and don't ask again.' Unfortunately, this also saves any included secrets, making them visible to anyone browsing these public repositories. This exposes developers and organizations to potential security risks, as attackers can easily access these credentials to compromise systems. The incident highlights the need for developers to be cautious when using AI tools and to implement better practices for managing sensitive information.

Nov 7, 2026

SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks

BleepingComputer

SonicWall has issued security updates to address seven vulnerabilities in its SonicOS firewalls, one of which is a serious SSL-VPN authentication bypass flaw. This vulnerability has already been exploited in active attacks, putting users at risk of unauthorized access to their networks. Companies that use SonicWall firewalls should prioritize applying these updates to safeguard their systems. The affected products primarily include various versions of SonicWall's SonicOS, highlighting the need for prompt action from system administrators. As cyber threats continue to evolve, staying updated with security patches is crucial to maintaining network integrity.

Nov 7, 2026

Alpine Linux and OpenSSH patch flaw that’s as bad as it can get

news – ZDNET

Alpine Linux and OpenSSH have been found to contain a significant security vulnerability that requires immediate attention. This flaw could allow unauthorized access to systems running these software packages, posing a serious risk to users and organizations relying on them. The vulnerability affects various versions of Alpine Linux and OpenSSH, making it critical for administrators to patch their systems promptly. Failing to address this issue could lead to severe consequences, including data breaches and compromised systems. Users should prioritize applying the necessary updates to safeguard their environments.

Nov 7, 2026

UK Wades Into Tech Sovereignty Amid AI Policy Changes

darkreading

The UK government is focusing on boosting its domestic artificial intelligence and cybersecurity sectors to lessen its dependence on American technology. This initiative comes in response to growing concerns among security leaders regarding the fragmentation of funding and whether it is arriving too late to make a significant impact. The aim is to enhance the UK's tech sovereignty and ensure that the nation can develop its own capabilities in the rapidly advancing fields of AI and cybersecurity. However, experts are questioning if the strategy will effectively address the challenges posed by existing reliance on foreign tech providers. As the UK moves forward, the success of these investments will be critical in shaping its future tech landscape.

Nov 6, 2026