AUTO-UPDATED

Security News This Week: LastPass Users Had Their Data Stolen—Again

Former national security adviser John Bolton pleaded guilty to mishandling classified defense information, while international law enforcement agencies disrupted major malware infrastructure used by global cybercriminal networks this week.

Key Points

  • John Bolton, 77, faces a potential five-year prison sentence and a $2.25 million fine after pleading guilty to the illegal retention of classified defense information.
  • Microsoft and Europol’s Operation Endgame seized 326 servers and 142 domains linked to the Amadey and StealC infostealer malware.
  • The operation recovered 27 million stolen access credentials and identified $47 million in illicit cryptocurrency.
  • Australia’s ASIO discovered nation-state hackers inside a critical infrastructure provider, noting the actors were mapping networks to prepare for potential future sabotage.
  • LastPass confirmed a data breach involving customer contact information, resulting from a third-party security compromise at the business intelligence firm Klue.

Why it Matters

These events highlight the escalating risks posed by both internal security lapses and sophisticated state-sponsored cyber threats to global infrastructure. The successful disruption of major malware networks demonstrates the growing role of AI-assisted analysis in modern law enforcement, even as organizations struggle to secure sensitive data against persistent digital attacks.
Wired Published by Lily Hay Newman
Read original