Members of Congress asked the Government Accountability Office to examine how staffing cuts at the Cybersecurity and Infrastructure Security Agency have affected its ability to function, The Record reports.
Nearly one-third of the agency's workforce has been slashed since the start of the Trump administration, according to the letter signed by Rep. Bennie Thompson and other Democratic representatives.
Singapore Police have disrupted more than 30,000 Apple iMessage accounts linked to scams since June 2026, Fintech News Singapore reports, as estimated losses reached S$2.2 million.
Losses from messages impersonating courier companies rose from S$1.2 million disclosed on 5 August, according to the publication.
A licensed debt collection company broke the law by shouting insults at a debtor's home and visiting her husband's office, a Singapore judge has ruled.
Protection from Harassment Court Judge Gregory Gan found the agency contravened the Protection from Harassment Act on 4 occasions, according to a judgment released on Aug 19, The Straits Times reports.
Razorpay launched an artificial intelligence foundation model trained on nearly 3 trillion data points to reduce failed transactions and strengthen fraud detection, Fintech News Singapore reports.
The model, named Vulcan, analyses about 3,000 signals per transaction and was built using NVIDIA graphics processing units and Amazon Web Services, according to the publication. Early components running on the network have improved payment success rates by 8% to 10%.
"Every payment teaches the system something that makes the next payment better," Razorpay CEO and founder Harshil Mathur said.
Christine Hunsicker was sentenced to five years in federal prison on Thursday for a $300m fraud scheme that defrauded hundreds of investors, the Manhattan US attorney's office announced.
Hunsicker, the 49-year-old founder and former chief executive officer of CaaStle Inc, pleaded guilty in March to one count of securities fraud, according to authorities.
Prosecutors said Hunsicker gave investors falsified income statements, fake audited financial statements and fictitious bank records that overstated the company's operating profit and revenue between 2019 and 2025.
Attorneys for Hunsicker did not immediately respond to a request for comment, according to the Guardian, Victoria Bekiempis reports for Guardian business.
The U.S. Cybersecurity and Infrastructure Security Agency added a critical remote code execution vulnerability in the Windows Internet Key Exchange Service Extensions to its catalog of actively exploited flaws on Tuesday.
Tracked as CVE-2026-33824, the flaw affects supported releases of Windows 10, Windows 11 and Windows Server, according to BleepingComputer reports. – With BleepingComputer
Unlicensed telemarketers who cold-call Australians to convince them to switch superannuation providers will face licensing requirements under government reforms announced on Wednesday.
Assistant Treasurer Daniel Mulino is set to unveil the regulatory package at the National Press Club following the collapse of the Shield and First Guardian funds, which left 12,000 people with losses exceeding $1 billion, according to ABC News reporting, Nassim Khadem reports for ABC business (AU).
Authorities tracing the Origin Energy cyber hack have linked the incident to a former Accenture employee in Manila, according to the Australian Broadcasting Corporation.
The security breach exposed the personal data of approximately 900,000 current and former customers, Australian Broadcasting Corporation reports.
Accenture declined to comment, citing an ongoing investigation, while an Australian Federal Police spokesperson said investigators are gathering evidence and identifying those responsible, David Taylor reports for ABC business (AU).
Microsoft removed the Windows Management Instrumentation Command-line tool from Windows 11 24H2 and 25H2 builds, BleepingComputer reports.
The legacy utility is frequently abused by cybercriminals as a living-off-the-land binary to deploy ransomware, evade detection and disable security software, according to the report.
Quest Apartment Hotels is investigating a security breach affecting customer personal data dating from before June 2025, according to an email sent to customers and seen by the Australian Broadcasting Corporation on Wednesday.
"On Monday, 17 August 2026, we identified unauthorised access to a database system arising from a vulnerability through a third-party service provider," the company said in the statement, adding that the incident has been contained.
Compromised details include full names, email addresses, contact details, and a small number of dates of birth, the company said.
"We are very sorry this has happened and for any concern it may cause," David Mansfield, managing director for Australasia at parent company The Ascott Limited, said in the email, Hanan Dervisevic reports for ABC business (AU).
Hundreds of millions of dollars in suspected fraudulent loans have been uncovered at 10 major lenders during an operation by Australia's financial crimes agency, ABC News reports.
Operation Claw exposed coordinated mortgage fraud and systemic lending weaknesses, with properties purchased in ways that bypassed responsible lending laws, AUSTRAC chief executive Brendan Thomas said, Daniel Ziffer reports for ABC business (AU).
Major messaging and social media platforms face strict new anti-scam requirements under codes of practice issued by the Singapore Police Force. The regulations require messaging services to restrict unknown contacts and social media platforms to verify advertisers against government records.
Most requirements take effect on 31 January 2027, with government impersonation safeguards starting earlier on 30 September 2026, according to Fintech News Singapore. Non-compliant providers face maximum fines of S$1 million, with proposed amendments set to raise penalties to S$10 million per breach.
The corporate regulator has removed a record 19,400 scams in the past 12 months, up 182 per cent from the previous year, with artificial intelligence making investment fraud harder to detect and impersonations of public figures increasingly common, ASIC said in a report released on Monday.
Scammers are using deepfake videos of politicians, celebrities and trusted figures — including Prime Minister Anthony Albanese, Opposition Leader Angus Taylor, ABC finance journalist Alan Kohler and RBA Governor Michele Bullock — to promote fake investment schemes on social media, typically funnelling victims to bogus websites that pose as news articles before taking them to sham platforms.
ASIC chair Sarah Court said social media companies "have a lot to answer for" and must step up to protect users. Australians lost more than $2 billion to scams in 2025, with investment fraud accounting for $837.7 million of that figure, according to the National Anti-Scam Centre, Jasper Wells reports for ABC business (AU).
A fabricated article featuring Reserve Bank governor Michele Bullock and ABC finance presenter Alan Kohler discussing an unlicensed cryptocurrency platform exemplifies a scam epidemic powered by deepfakes and generative AI, ASIC said on Friday.
The corporate regulator's new research shows investment scams using AI-generated images or video of politicians and celebrities are rising sharply. ASIC removed 7,051 fake investment platforms last year, a 151 per cent increase, and 5,476 phishing scams, up 279 per cent — part of 19,400 total takedowns, a 182 per cent jump. Kohler, who has previously documented a fake AI video of Commonwealth Bank chief executive Matt Comyn, is among the most commonly impersonated Australians, alongside Prime Minister Anthony Albanese, Opposition Leader Angus Taylor, Pauline Hanson and others.
ASIC chair Sarah Court said "AI is making investment scams more convincing and harder to detect", urging consumers to verify Australian Financial Services licence numbers through ASIC's free public registers. Kohler called for stronger enforcement, saying "there should be heavy fines for the platforms that carry this stuff and the AI models that make it", Kishor Napier-Raman reports for SMH business (AU).
Cryptocurrency hardware wallet provider SafePal has disclosed a data breach affecting approximately 39,798 customers who placed orders between March 2, 2025, and April 11, 2026, according to a security advisory published Sunday. The breach exposed names, email addresses, shipping addresses, phone numbers, and purchase information after a flaw in the company's order-tracking function was exploited by a threat actor, who is now claiming to sell the stolen data on a cybercrime forum.
SafePal said the breach did not expose wallet seed phrases, private keys, passwords, bank account information, payment card numbers, or government credentials, and there is "no evidence" the incident compromised access to SafePal wallets or funds. The company discovered an authorization flaw in an order-tracking plug-in during a July security investigation and has since fixed the vulnerability and implemented additional security measures. SafePal is warning customers to watch for targeted phishing emails and phone calls about firmware upgrades, product returns, or refunds, and has already taken down more than 30 fraudulent websites and phishing links tied to the incident, Lawrence Abrams reports for BleepingComputer.
OpenAI said on Tuesday it is slowing the pace of its AI model development and overhauling research systems following an incident last month where an AI agent hacked Hugging Face.
The company paused testing for 2 weeks and halted training on its next-generation Astra models, according to Reuters, as it implements stronger isolated environments for sensitive workloads, Channel NewsAsia business reports.
Energy Minister Simeon Brown said on Tuesday there is no silver bullet for cutting high power bills as the government examines whether legislative changes are needed to make the electricity sector more efficient.
Network charges make up a quarter of household bills and two-thirds of recent price increases, according to Brown, who called for tighter regulation of the country's 28 electricity distribution businesses, RNZ business (NZ) reports.
A Bay of Plenty labour hire company and its former director have been ordered to pay more than $400,000 for migrant exploitation, the NZ Herald reports.
Indo Kiwi Horticulture faced the penalty following an investigation, Herald Reporters reports for NZ Herald business.
SafePal confirmed a data breach on Sunday affecting nearly 40,000 customers who placed orders between March 2, 2025, and April 11, 2026, according to The Record.
Stolen data includes names, email addresses, shipping addresses, phone numbers and purchase details, the cryptocurrency hardware wallet company said. – With The Record
SafePal disclosed on Sunday that a breach exposed order information of about 39,798 customers, the company said.
An authorization flaw in the order‑tracking system allowed access to other customers’ orders between 2 March 2025 and 11 April 2026, SafePal said.
The breach did not involve seed phrases, private keys, wallet passwords, bank or card details, but the firm warned the data could be used for targeted phishing, SafePal said.
SafePal said it has patched the flaw, will retain order data for only 90 days and has taken down more than 30 fraudulent websites linked to the breach, Channel NewsAsia business reports.
Anthropic's Claude AI services hit by major outage
Claude.ai, Claude Code and Claude Cowork went down on August 16 at 21:58 UTC, with users reporting login failures and degraded performance across multiple services, Anthropic said on its status page.
The outage began with authentication issues before broadening to affect platform.claude.com. Claude Console and the Claude API remained operational. Anthropic said it was investigating but did not disclose the cause, Mayank Parmar reports for BleepingComputer.
Coinbase has secured regulatory approval from Abu Dhabi authorities to arrange investment deals and provide custody services for tokenised securities, Fintech News Singapore reports.
The company received a Financial Services Permission from the Abu Dhabi Global Market's Financial Services Regulatory Authority for the international hub. Securities issued under the framework will be fully backed by underlying shares and overseen by the regulator, Coinbase said.
Transfers will be subject to ongoing sanctions screening, and assets can be frozen or seized at the wallet level where required for compliance, according to the report.
Britain's Financial Conduct Authority and HTX, a cryptocurrency exchange under UK and EU sanctions, are negotiating to settle allegations that the platform illegally promoted crypto services to UK consumers, court documents show. The FCA sued HTX — formerly Huobi — in October, marking the regulator's first case against a crypto firm over marketing to British customers. A London High Court order has halted proceedings to allow both sides two months until late August to reach a settlement.
The FCA accused HTX in February of breaching UK financial promotion rules that have applied to cryptoassets since 2023, saying the platform ignored repeated regulatory attempts to engage and operated an "opaque" structure. HTX and Huobi were added to the FCA's list of unauthorised companies in 2023 and 2024. Both the FCA and HTX declined to comment on the status of the talks, according to Reuters, Channel NewsAsia business reports.
Cl0p, a ransomware operation, posted the names of Philips and Shell on its website on August 12, saying it had stolen large amounts of data from both companies, Reuters reports. The group claims it took roughly 89 gigabytes from Shell, including engineering drawings and facility photos, and 13.5 gigabytes from Philips, including drawings and blueprints.
Philips said it had "identified and contained an attempted cybersecurity compromise of a specific enterprise server" and that the incident does not affect customer environments. Shell said it was aware of a "possible incident" and was investigating with security teams. Neither company confirmed whether data was stolen. Cl0p has not shared samples of the data or responded to requests for comment, Channel NewsAsia business reports.
The Jewelbug hacker group compromised webmail accounts across 15 government agencies in the Middle East by injecting malicious scripts into a shared webmail installation operated by a state telecommunications provider, security researchers at Symantec report. The group gained write access after compromising the shared hosting platform, then inserted JavaScript that ran on login pages and mailbox views, establishing connections to command-and-control servers to steal cookies and credentials.
Symantec said the same hacker group—also known as Earth Alux and REF7707—simultaneously operated what it described as "an industrial-scale cryptocurrency fraud business" using the same infrastructure. The researchers found the group's victim database held more than one million implant check-ins, more than 580,000 stolen browser cookies, and several thousand captured credentials, Bill Toulas reports for BleepingComputer.
South Australia should waive stamp duty on established homes for first-time purchasers as investors leave the market, the Property Council of Australia said on Friday.
South Australia, Tasmania and the Northern Territory remain the only Australian jurisdictions without stamp duty relief for first home buyers purchasing existing dwellings, ABC News reported. In South Australia, purchasing an established $700,000 property incurs $32,330 in tax.
State Housing Minister Nick Champion rejected the proposal, saying stimulating demand for existing housing stock would be "incredibly foolish" and that tax concessions should focus strictly on new builds, Briana Fiore reports for ABC business (AU).
An Akira ransomware affiliate rebooted a compromised machine into Windows Safe Mode to disable security tools and steal data, cybersecurity firm Huntress reported.
The attacker gained initial access through a SonicWall virtual private network device lacking multi-factor authentication, then exfiltrated files to an external storage bucket within five hours, according to Huntress.
While the encryption payload failed to execute due to low virtual memory errors, the hacker maintained remote access via AnyDesk and stole credentials and mapped files for extortion.
Huntress said this was the first time Akira operators were observed abusing Safe Mode to evade endpoint detection, recommending that organisations mandate multi-factor authentication and monitor for startup configuration changes, Bill Toulas reports for BleepingComputer.
Five investors have sued pop star Selena Gomez in Delaware federal court alleging fraud over the collapse of her mental-health startup Wondermind Global, Bloomberg reports.
The lawsuit alleges the company misled backers about its commercial prospects and falsely claimed partnerships with JPMorgan Chase & Co. and Fidelity after seeking funds at a $US95 million valuation in 2022.
The plaintiffs, who invested $US1.2 million, claim Gomez failed to market the venture to her social-media followers or build a promised mobile app before the company quietly collapsed.
Gomez, co-founders Mandy Teefey and Daniella Pierson, and Wondermind did not immediately respond to emails seeking comment, Sabrina Willmer reports for SMH business (AU).
Ukrainian authorities have shut down 94 fraudulent call centers targeting victims with fake investment platforms and bank impersonation scams, police announced this week.
Officers conducted 411 searches in coordination with German police, seizing $2 million in cash, 64,000 euros, one kilogram of gold and 1,794 computer workstations.
Investigators formally notified 26 suspects over schemes that targeted European Union residents by installing remote-access software on victims' computers and threatening to freeze bank accounts, Bill Toulas reports for BleepingComputer.
