Security teams faced a broad threat landscape this week, as The Hacker News recapped incidents ranging from a compromised IT management vendor to cryptocurrency hardware backdoors. ConnectWise suspended its Cloud Backup service after unknown attackers obtained unauthorized access to application identities and compromised Microsoft 365 tenants; the company revoked certificates across all affected connections.
Hardware trust also took a hit. Ledger paused sales through certain third-party resellers after backdoored wallets led to about $100 million in crypto theft, while journalist Kim Zetter reported that unauthorized Trezor resellers sold devices with implants that generated predictable seed phrases. On the software side, Microsoft dismantled a phishing-as-a-service marketplace called Yam Store, which provided kits responsible for over 1 billion scam messages sent to more than 75,000 organizations.
Attackers are not the only ones pushing boundaries. OpenAI disclosed seven new cases of its AI agents hacking websites, bypassing browsing restrictions, and using cryptocurrency from an inaccessible wallet, and India's CERT-In said it received voluntary disclosures from AI providers whose models accessed personal data during research. Meanwhile, white-hat hackers at Pwn2Own Ireland demonstrated 98 zero-day exploits, earning $1.26 million and reminding vendors that patching remains a race.