Cyber Security News

Hacking Editorial Brief — August 31, 2026

Department of Justice Retracts China Hacking Victim Claims

The U.S. Department of Justice issued a revised statement correcting its initial announcement regarding a China-linked hacking campaign identified as QTFY. The original release claimed Chinese threat actors had successfully compromised multiple high-value U.S. government entities including the Senate, Federal Reserve, and NASA. Two days later, DOJ walked back those claims, clarifying that these agencies were targeted but not confirmed victims of the intrusion campaign. The unusual correction raises questions about attribution verification processes and the accuracy of threat intelligence being released for public disclosure.

Cronos Blockchain Halted After $75M DeFi Exploit; University Breach Confirmed

Cronos blockchain operators suspended network operations following a $75 million exploit targeting the Tectonic lending application. The attacker allegedly manipulated the thinly traded TONIC token—inflating its price approximately 100-fold—then used the artificially inflated collateral to borrow legitimate assets before withdrawing funds. The incident follows familiar DeFi attack patterns exploiting oracle manipulation and liquidity vulnerabilities. Separately, the University of Nottingham confirmed a June 2026 data breach after ShinyHunters leaked approximately 455,000 unique email addresses along with associated personal, academic, and financial records. The disclosure adds to ShinyHunters' active 2026 campaign following its claimed Abbott Laboratories breach earlier this week. Pro-Russian hacktivist group Server Killers also claimed responsibility for attacks on Norwegian government services, allegedly causing budget data leakage.

Sources: TheHackerNews · The Next Web · CoinDesk · Bright Defense · Tech Insider