News about cybersecurity

World, the project backed by Sam Altman, has rolled out biometric verification badges for Zoom enterprise users to combat AI deepfake impersonation and fraud. Its World ID for Zoom is now available in the Zoom Marketplace and compares an image captured by its iris-scanning Orb, a live selfie and the participant's video feed before displaying a Human Badge to other meeting participants. The feature had been in limited beta testing with VanEck Funds since April and is now available globally to Zoom enterprise customers. Bain Capital and Pantera Capital were named as initial design partners. The rollout follows incidents such as a 2024 case in which an Arup employee transferred about $25 million after scammers impersonated executives during a video conference, and a February incident in which suspected North Korea-linked hackers used fabricated video feeds in fake Zoom meetings.

Burger King Japan said an intruder accessed its member management server without authorization from October 2 to October 7, 2026, before the breach was detected. An investigation completed on October 13 found that 11.18 million customer records were at risk of leaking, including full names in Kanji and Kana, dates of birth, gender, email addresses, phone numbers, prefecture of residence and app order-history tags. The company said no credit card or bank payment information was stored in the system, and its access logs showed no evidence that account passwords were stolen. Burger King has blocked the unauthorized access, reported the incident to Japan's Personal Information Protection Commission (PPC) and police, and warned customers about scam calls, texts and emails impersonating the brand.

Layer-1 blockchain Qubic halted its network after an attacker exploited weakly generated wallet seeds to drain about $1.4 million from more than 1,400 accounts, according to the project. The vulnerability affected wallets created with any browser on iPhone or iPad, Safari on Mac until Oct. 18, 2026, or the Qubic iOS app before July 2025, with 2.94 trillion QU stolen. Qubic says 87.1% of the funds remain frozen on its network, while 12.9% was sent to MEXC, whose team froze the receiving account within about an hour. The team has fixed the flaw in web wallet version 4.26.4, is identifying affected wallets, and will let Computors vote on a recovery plan; no restart date has been announced. The article links the incident to a series of weak-seed attacks in recent years.

HEX founder Richard Schueler (Richard Heart) was detained in Istanbul on October 14, and the HEX market cap fell from $561 million to $315 million this week. Police seized $7.15 million in cash, along with firearms and ammunition, in an early-morning raid in Istanbul's Beşiktaş district and 15 related addresses, and impounded luxury vehicles registered to his wife. Ledger unveiled Atom, an $849 device expected to ship in summer 2027, days after confirming that wallets sold through an Asian reseller contained malicious implants, an incident tied to more than $90 million stolen. Starknet opened a vote to transform from an Ethereum L2 into a post-quantum L1, with more than 99% of votes cast so far in favor, but its token lost almost 50% of its value this week.

CrowdStrike (CRWD) has nearly doubled in 2026, while its revenue growth has stayed steady at 26%. Analysts expect 24% revenue growth in the third and fourth quarters and 23% next year. The author, who is a shareholder, notes that the price-to-sales ratio, used because the company is not profitable, is the highest since 2021, and that the stock may have gotten ahead of itself, similar to the 2022 software sell-off when expectations outran growth. He suggests it may be time to trim and take gains, and says a $5,000 investment could be worth less by 2028 given the high valuation, preferring other AI stocks with better valuations and faster growth.

At the IMF and World Bank annual meetings in Bangkok, IMF Managing Director Kristalina Georgieva warned that AI-boosted cybercrime could undermine trust in the financial system, citing hackers who pushed French supermarket fridges to 50C and spoiled food. She worried that many people could end up keeping cash in shoeboxes under their beds. JPMorgan CEO Jamie Dimon said the bank would not allow AI agents to operate on customers' behalf, while agents that move deposits to chase the highest savings rates could trigger rapid withdrawals and raise unresolved questions about liability. Bank of England Governor Andrew Bailey said, “If we don't have trust in money, we don't operate as a society.” The column says financial policymakers are alarmed by the collision between fast-moving AI and a financial system that now extends well beyond heavily regulated banks.

Hacken says hackers stole $1.18 billion from crypto projects in the third quarter across 107 incidents, up 55% from the previous quarter. About $906.8 million of that came from compromised suppliers or developer tools, uninstalled security fixes, or components excluded from the latest security review. Hacken warns that audit badges can give investors a false sense of security, since reviews often omit wallets, signing systems and third-party software that attackers target. The biggest incident was the September attack on Bitget, which lost at least $352 million after hackers exploited a vulnerability in a third-party security product.

Many AI-leading stocks are pulling back after three years of strong gains, as investors worry about rising data-center funding costs and weaker-than-expected future demand. The iShares Semiconductor ETF is down more than 20% from its June peak and is in bear territory, weighing on the Nasdaq-100 and S&P 500. The author highlights two non-semiconductor AI stocks: Datadog (DDOG), whose revenue growth accelerated to 36% in Q2 and whose 2026 revenue forecast was raised by $140 million to $4.46 billion, though its P/S of 24.3 is well above its three-year average of 17.7. Palo Alto Networks (PANW) reported next-generation security ARR of $9 billion, up 63%, and targets $20 billion by fiscal 2030.

Cysic suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday. Preliminary findings point to unauthorized access to a database supporting the bridge. The company blacklisted the recipient address on the token contract, where about 2.8 million CYS remained with transfers restricted. Cysic says the incident was limited to bridge message processing and minting, did not affect the mainnet, and did not result in the theft or unauthorized transfer of existing CYS or other assets in user wallets. The company added that the mint size does not establish the final dollar loss, has hired a security firm, and plans to publish a follow-up report.