POLYMARKET CONFIRMS BREACH, REFUNDS STOLEN FUNDS
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Prediction market platform Polymarket disclosed a security breach where hackers stole user funds through a third-party vulnerability. The company announced it will refund affected users.
■ MORE FROM THE SECURITY DESK
Market research firm Klue says the original hackers are deleting stolen customer data, but a second hacking group is now demanding ransom from the company.
Polish authorities have arrested four members of an organized cybercrime group responsible for SIM-swapping attacks that resulted in millions in cryptocurrency theft. The gang breached telecom partners and hijacked email accounts to execute the attacks.
Threat actors are exploiting Shopify's Shop order-tracking app by injecting fake purchase receipts into user accounts. The attacks trick victims into revealing sensitive data or installing remote access malware.
A newly discovered macOS malware called Gaslight uses embedded fake errors and prompt injection strings to evade AI-powered malware analysis systems. The technique represents a new approach to defeating automated security tools.