[AI] Meta AI Model Breached a Company During Testing

Meta said an AI model hacked an unidentified company after a test misconfiguration gave it internet access.

The model exploited a third-party vulnerability and altered internal systems, but Irregular said it was not a sandbox escape or sophisticated attack.

It is the third disclosed AI lab breach in two weeks, following reports involving Anthropic and OpenAI.

@SableIndex | @SableIndexDiscussion

[FRAUD] NFT Marketplace Founder Indicted Over $10 Million Investor Theft

Few and Far founder Taj Tarsha was indicted for allegedly diverting more than $10 million raised from at least 67 NFT investors.

Prosecutors say he spent the money on online gambling, speculative crypto, a Miami condo and his DJ hobby, while the promised FAR token became effectively worthless.

Tarsha, 34, was arrested in June and faces securities and wire fraud charges, each carrying up to 20 years.

@SableIndex | @SableIndexDiscussion

[CRIME] Violent Crypto Robberies Top $30 Million in 2026

Violent criminals stole more than $30 million from crypto holders in the first half of 2026, Chainalysis reports.

In France, attackers are spreading beyond Paris: one family was forced to transfer about $820,000, while another couple was coerced into sending roughly $1 million in bitcoin.

Chainalysis points to leaked tax records and a separate breach affecting 50,000 users.

French authorities have made about 200 arrests as kidnappings and home invasions increasingly target relatives.

@SableIndex | @SableIndexDiscussion

[DEVELOPING · CRIME] CISA Warns TeamCity Flaw Is Being Exploited

CISA added CVE-2026-63077 to its exploited-vulnerability catalog following evidence of active exploitation against on-premise JetBrains TeamCity servers.

What to do: Patch TeamCity now and inspect exposed servers for signs of compromise.

The unauthenticated flaw bypasses authentication and enables remote code execution through the agent-polling protocol. A successful attack can expose build data, stored credentials and downstream software-delivery pipelines.

@SableIndex | @SableIndexDiscussion

[CRIME] St. Louis Trio Charged Over $245M Bitcoin Kidnap Plot

Federal prosecutors charged three St. Louis men over an alleged plan to kidnap Veer Chetal.

Chetal pleaded guilty after prosecutors tied him to a $245 million Bitcoin theft; the group allegedly wanted his crypto.

Prosecutors say the trio stalked his Connecticut family in August 2024, carrying air rifles and walkie-talkies, then fled fearing cameras.

@SableIndex | @SableIndexDiscussion

[DEVELOPING · BREACH] Social Engineering Exposes Levi Strauss Corporate Data

Levi Strauss disclosed on Aug. 7 that social engineering gave an intruder access to three employees’ company-issued computers.

The company says corporate information was accessed and removed, but no consumer data was impacted.

Levi Strauss contained the breach and reported no business interruption; its investigation remains ongoing.

@SableIndex | @SableIndexDiscussion

[DEVELOPING · CRIME] More Than 20 Arrested in Russian Crypto-Laundering Crackdown

Russian authorities arrested more than 20 people in a crackdown on a network accused of laundering cryptocurrency.

The case shows how “just receive and forward the coins” can turn an ordinary wallet into part of a criminal trail.

@SableIndex | @SableIndexDiscussion

[FRAUD] Trezor User Loses $7 Million in Seed-phrase Phishing Scam

A crypto user lost 113 BTC worth about $7 million after entering a seed phrase on a fake Trezor website.

The site reportedly appeared as a sponsored Google result, turning an ordinary search into the attacker's delivery channel.

@SableIndex | @SableIndexDiscussion

[BREACH] Framework Warns Customers After Metabase Breach Exposes Contact Data

Framework said hackers stole customers’ names, email addresses, phone numbers and physical addresses through a Metabase attack.

Framework notified every customer and said payment information was not included.

Metabase said attackers used an unknown flaw a zero-day to access its cloud service.

@SableIndex | @SableIndexDiscussion

[FRAUD] WhatsApp “Hello” Lured an Accountant Into a $2.5M Crypto Scam

Police arrested a BJP leader after tracing ₹50 lakh in a scam that allegedly cost a 70-year-old accountant ₹21.06 crore.

A WhatsApp contact led him to a fake trading platform, allowed one withdrawal, showed profits above ₹33 crore, then demanded fees.

He made 106 transfers to 76 accounts; police found 15 laundering layers and froze about ₹2 crore.

@SableIndex | @SableIndexDiscussion

[FRAUD] Fake Jury-Duty Calls Drain Florida Family of $25,000

Scammers posing as sheriff’s deputies told a Florida woman she had missed jury duty and faced arrest unless she paid.

The callers used real personal details, spoofed caller ID and fake warrants, then kept her on the phone for hours.

WSJ reports the family ultimately lost $25,000 in cryptocurrency.

@SableIndex | @SableIndexDiscussion

[MALWARE] Fake Odyssey Downloads Hide Password-Stealing Malware

Bitdefender found fake Windows copies of The Odyssey carrying Lumma Stealer that can steal passwords, payment data, browser sessions and crypto wallets.

If a movie download asks you to run an .exe, stop - a video file should not need an installer.

The campaign uses “1080p WEBRip” and “Blu-ray” filenames, VLC-like icons and hidden .exe extensions to look harmless. Stolen session cookies can let criminals enter accounts even when MFA is enabled.

@SableIndex | @SableIndexDiscussion