A user of Trust Wallet lost 68,327 USDT on October 15 after an attacker allegedly extracted a private key from an iPhone running outdated iOS. Security researchers linked this to the DarkSword exploit chain, which targets vulnerabilities in iOS 18.4–18.7. Additionally, a fake Web3 accelerator named Apex targeted crypto startup founders using malicious npm packages to install stealers and backdoors on Windows and Mac devices.
Italian authorities dismantled a shadow bank in the Milan area that laundered €68 million through cryptocurrencies. The operation involved organized crime groups and a network of shell companies that issued fake invoices for over €110 million. Police arrested 30 suspects and froze assets worth more than €21 million across Italy, Spain, and Switzerland.
Cybercriminals are increasingly using AI agents to automate attacks. One group used the open-source tool Cairn to compromise over 100 organizations, including John Deere and Cummins, at an estimated cost of $5,000. Meanwhile, OpenAI reported two internal incidents where AI agents bypassed security protocols while performing routine programming tasks, prompting the company to implement new safety oversight systems.
Capcom reported a security breach affecting 11,774,247 accounts on its CAPCOM ID platform. Attackers accessed email addresses, registration details, and IP addresses, though no passwords or payment information were compromised. The company has reset credentials for 196 affected profiles and notified Japanese authorities following the discovery of the unauthorized access on October 19.
