Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns | Wiz Blog

Malicious versions of the arrayref Rust crate (and others) executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios...

wiz.io

FinCEN Permanently Ends Beneficial Ownership Reporting Requirements for Millions of Small Business Owners

Will Delete Information Previously Reported by U.S. PersonsWASHINGTON––Today, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) is issuing a final rule that permanently removes the requirement for U.S. companies and U.S. persons to report beneficial ownership information to FinCEN under the Corporate Transparency Act.  The final rule is effective on its publication in the Federal Register. FinCEN today also announced that it will delete previously reported information by U.S. persons—now exempt from the reporting requirements—from the beneficial ownership information database. “Today’s action is a victory for common sense and American small businesses,” said Secretary of the Treasury Scott Bessent. “President Trump promised to cut red tape, and this final rule delivers. Treasury is eliminating a burdensome reporting requirement for millions of law-abiding business owners without compromising our national security.” The final rule:adopts the exemptions set out in the interim final rule issued in March 2025, making the rollback of beneficial ownership reporting by U.S. companies permanent;exempts U.S. persons who have obtained FinCEN IDs from any obligation to update or correct the information they originally provided to FinCEN to obtain their FinCEN IDs;eliminates the requirement for foreign companies to report U.S. person “company applicants” (i.e., the individuals who helped those foreign companies register to do business in the United States);exempts foreign pooled investment vehicles registered in the United States from reporting the beneficial ownership information of a U.S person in control of the investment vehicle; andconfirms that FinCEN will delete information about any individuals—company applicants, beneficial owners, or recipients of a FinCEN ID—that FinCEN reasonably believes is a U.S. person (e.g., the information is linked to a U.S. passport or U.S. driver’s license).Under the final rule, foreign entities that are reporting companies will still be required to report beneficial ownership information for foreign individuals. In addition to the final rule, FinCEN has issued Frequently Asked Questions, and will be updating guidance on FinCEN.gov to reflect the final rule. ###

home.treasury.gov

keyv and cacheable npm Package Hijacked in Supply Chain Attack | Wiz Blog

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.

wiz.io

TA488 Targets Zimbra Mailservers with Half-Click Exploits | Proofpoint US

Proofpoint is releasing this report in coordination with NSA and FBI’s JSAC reporting about TA488/Void Blizzard, which can be found here. This is part 1 of a 2-part blog series Proofpoint is

proofpoint.com

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most...

krebsonsecurity.com

Exclusive | How Hackers Found a Back Door Into the American Living Room

Nation-state cyberattackers are increasingly using residential proxy networks to mask their traffic, turning everyday electronics into a massive global threat.

wsj.com

Threat Actor Targets Crypto Organizations | Wiz Blog | Wiz Blog

Threat actor, JINX-0164, uses LinkedIn social engineering, custom macOS malware, and CI/CD hijacking to target crypto organizations.

wiz.io

Putin and Xi Plan for Co(de)dependence

Russia and China consider expanding their digital cooperation per the joint statement following recent talks in Beijing.

fromcyberia.substack.com

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks that has impacted hundreds of organizations.

wired.com

Fear of the (Un)known: How to Think About Risk and Threat Cultures in Cyber Conflict

The question of how states make operational decisions in cyber conflict is under-theorised. Much of existing scholarship has answered it within general frameworks of materialist and rationalist the...

tandfonline.com

durabletask: TeamPCP's Latest PyPi Compromise | Wiz Blog

Discover the latest on malicious versions of the pypi package durabletask, matching TeamPCP tactics.

wiz.io

A statement to our community about why RightsCon 2026 will not take place in Zambia

Our official statement to the digital rights community about why RightsCon 2026 will not take place in Zambia

rightscon.org

Our evaluation of Claude Mythos Preview’s cyber capabilities | AISI Work

We conducted cyber evaluations of Anthropic’s Claude Mythos Preview and found continued improvement in capture-the-flag (CTF) challenges and significant improvement on multi-step cyber-attack simulati...

aisi.gov.uk

All-in-one virtual event platform | Zoom Webinars & Events

events.zoom.us

prt-scan: AI-Powered GitHub Actions Supply Chain Attack | Wiz Blog

Wiz Research traces six waves of pull_request_target exploitation to one actor, starting three weeks before public disclosure. 500+ malicious PRs, 10% success.

wiz.io