Ma'lumotlar Buzilishi
Chainalysis AI yordamida amalga oshirilgan kiberhujumdan so'ng ma'lumotlar buzilishini e'lon qildi
Hujumchilar kompaniya tizimlari va ichki vositalariga kirish uchun hujumkor agentlik usullaridan foydalangan.
Muallif
Ionut Arghire
| 2026-yil 2-noyabr (ET 6:27)
Blokcheyn tahlili kompaniyasi Chainalysis AI yordamida amalga oshirilgan kiberhujum qurboni bo'lganini va bu ma'lumotlar buzilishiga olib kelganini e'lon qildi.
"Bu oy Chainalysis tashqi shaxs hujumkor agentlik usullaridan foydalanib, Chainalysis tizimlari va ichki vositalariga ruxsatsiz kirishganini aniqladi", — dedi kompaniya.
Kompaniya ta'kidlashicha, bu hodisa yaqinda Shimoliy Koreya xakerlari ayblangan 6,36 milliard dollarlik Binance o'g'irligiga aloqador emas.
Chainalysis ma'lumotlariga ko'ra, hujum tergov mazmuni, tranzaksiya yoki so'rov natijalari, ochiq matndagi parollar yoki boshqa ma'lumotlar va maxfiy ma'lumotlar buzilishiga olib kelmagan.
"Bizning platformamizda ro'yxatdan o'tgan foydalanuvchilarga tegishli ba'zi nozik bo'lmagan mijoz ma'lumotlari, masalan, foydalanuvchi IDlari, to'liq ismlar, elektron pochta manzillari va tashkilot roli yorliqlari, shu jumladan sizning tashkilotingiz va foydalanuvchilaringizga tegishli bunday ma'lumotlar kirilgan", — dedi Chainalysis.
Kompaniya ma'lumotlar buzilishining to'liq ko'lamini tekshirishni davom ettirmoqda va potentsial ta'sirlangan shaxslar sonini oshkor qilmagan.
Reklama. O'qishni davom ettirish uchun pastga aylantiring.
"Bizning jamoalarimiz ruxsatsiz faoliyatni tekshirish, zaifliklarni tuzatish va tizimlarimizni mustahkamlash uchun kechayu kunduz ishlamoqda", — dedi u.
Chainalysis AI yordamida amalga oshirilgan kiberhujumlar sanoat miqyosida o'sib borayotganini kuzatganini, chunki so'nggi haftalarda ko'plab boshqa texnologiya platformalari ham zarba olganini ta'kidladi.
Kompaniya o'z xavfsizlik holatini ko'rib chiqish va ushbu rivojlanib borayotgan tahdidlarga qarshi uni mustahkamlash uchun tashqi kiberxavfsizlik mutaxassislari va LLMlar bilan ishlamoqda.
Ismlar va elektron pochta manzillari buzilganligi sababli, u foydalanuvchilarga kutilmagan autentifikatsiya so'rovlari va parolni tiklash so'rovlarini kuzatishni va MFA yoqilganligiga ishonch hosil qilishni tavsiya qiladi.
Bog'liq: Polymarket DebugBear DNS o'g'irlanishini keltirib, savdogarlarga 3,9 million dollarni qaytardi
Bog'liq: 41 000 dan ortiq DHS xodimlarining yozuvlari onlayn tarzda oshkor bo'ldi
Bog'liq: Xakerlar Sony'ning yapon ISP So-net'dan 2,6 million yozuvni o'g'irladi
Bog'liq: HHS arizasi iRhythm ma'lumotlar buzilishi qurbonlari sonini 8,2 million deb ko'rsatmoqda
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek uchun xalqaro muxbir.
Kundalik Axborot Byulleteni
Eng so'nggi kiberxavfsizlik tahdidlari, tendentsiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Bulletproof Host Virtualine domenini FBI musodara qilishi natijasida yo'qotdi
- Hujumchilarning nishonida yangi WordPress zaifligi
- Alpine Linuxga qarshi hujumlarda ishlatilgan maksimal darajadagi GitLab zaifligi
- TeamViewer kamchiligi zararli xostlarga qo'llab-quvvatlash texniklarining mashinalarini egallashga imkon berishi mumkin
- Adobe, Veeam, Juniper Networks muhim zaifliklarni tuzatdi
- 41 000 dan ortiq DHS xodimlarining yozuvlari onlayn tarzda oshkor bo'ldi
- HHS arizasi iRhythm ma'lumotlar buzilishi qurbonlari sonini 8,2 million deb ko'rsatmoqda
- Xitoy xakerlari past darajadagi ESXi jurnal yozish kamchiligidan nol kun sifatida jimgina foydalandi
Eng so'nggi yangiliklar
- Polymarket DebugBear DNS o'g'irlanishini keltirib, savdogarlarga 3,9 million dollarni qaytardi
- FBI Binance o'g'irligiga bog'liq Shimoliy Koreya bilan bog'liq 600 dan ortiq manzilni aniqladi
- Ivanti Connect Secure hujum zanjirida ishlatilgan yana ikkita nol kunni tuzatdi
- Northstar Security 7 million dollar bilan yashirin rejimdan chiqib, zaharli xavf kombinatsiyalarini fosh qildi
- Suriyalik xaker AQShda o'n yildan ortiq qochqinlikdan so'ng qamoq jazosiga hukm qilindi
- PHP2Shell hujumlari Palo Alto devorlarini ildizdan o'chirdi, lekin WordPressga qarshi muvaffaqiyatsiz bo'ldi
- Boshqa yangiliklarda: Anthropic buzilish nizosi, UEFI kamchiligi ko'pchilik serverlarga ta'sir qiladi, Cloudflare AI ma'lumotlar sizishi
- Passkeys parollardan yaxshiroq. Ammo ular yetarli emas.
Trend
PHP2Shell hujumlari Palo Alto devorlarini ildizdan o'chirdi, lekin WordPressga qarshi muvaffaqiyatsiz bo'ldi
Passkeys parollardan yaxshiroq. Ammo ular yetarli emas.
Northstar Security 7 million dollar bilan yashirin rejimdan chiqib, zaharli xavf kombinatsiyalarini fosh qildi
Suriyalik xaker AQShda o'n yildan ortiq qochqinlikdan so'ng qamoq jazosiga hukm qilindi
Hujumchilarning nishonida yangi WordPress zaifligi
6 milliard dollarlik Binance o'g'irligi Shimoliy Koreyaning TraderTraitor belgilarini ko'rsatmoqda
Drupal Commerce Core zaifligi onlayn do'konlarga qarshi ishlatilmoqda
Cisco SD-WAN nol kun ishlatilishi Volt Typhoonning "Jim Poyezd" tarmog'iga bog'liq
Kundalik Axborot Byulleteni
Eng so'nggi tahdidlar, tendentsiyalar va texnologiyalar haqida xabardor bo'lish, shuningdek, soha mutaxassislarining chuqur fikrlarini olish uchun SecurityWeek elektron pochta axborotiga obuna bo'ling.
Biznes Elektron Pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik Siyosatimizni o'qing.
Vebinar: Kuchliroq CTEM dasturi uchun agentlik pentesting
2026-yil 4-noyabr
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyada agentlik pentestingni o'rganing va CTEM dasturingizda uzluksiz ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan o'ting
Virtual Tadbir: CISO Forum 2026 Sammiti
2026-yil 10 va 11-noyabr
CISOlar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiruvchi masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan o'ting
Harakatdagi odamlar
Barracuda Dan Fletcher'ni moliyaviy direktor (CFO) etib tayinladi.
Artemis Security Arun Singh'ni CGO etib tayinladi.
General Paul M. Nakasone Armadin direktorlar kengashiga qo'shildi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Passkeys parollardan yaxshiroq. Ammo ular yetarli emas.
Tashkilotlar parollarni yo'q qilgan sari, hujumchilar moslashadi. Autentifikatorga to'g'ridan-to'g'ri hujum qilish o'rniga, ular uning atrofidagi imkoniyatlarni qidiradi. (Torsten George)
Xavf shaxsiy bo'lganda: Xavfsizlik rahbarlari saraton tashxisidan nimani o'rganishi mumkin
Xavf menejerlari zaif signallarni aniqlash, buzilishlarga tayyorgarlik ko'rish va noaniqlik sharoitida qiyin qarorlar qabul qilishga o'rgatilgan. Ammo bu intizom tizim yoki korxona emas, balki siz bo'lganingizda boshqacha ko'rinadi. (Steve Durbin)
Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Biz baribir unga tayanamiz.
Deyarli har bir B2B bitimini nazorat qiladigan jarayon — yuboruvchi ishonmaydigan va qabul qiluvchi qabul qiladigan o'z-o'zini baholash. Nihoyat, kompaniyalar o'rtasida ishonch uchun yaxshiroq asos mavjud. (Sravish Sridhar)
Bu normal: NetScaler nol kunlari bizga yangi normal haqida nima aytadi
Yaqinda Citrix NetScaler tuzatishlari chiqarilishi mumkinligi uchun yamoqni boshqarish quvurlarini tayyor saqlang. (Tod Beardsley)
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklik
Sizning ishlab chiquvchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Data Breaches
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
The attackers used offensive agentic techniques to access the company’s systems and internal tools.
By
Ionut Arghire
| November 2, 2026 (6:27 AM ET)
*
Blockchain analytics company Chainalysis has announced falling victim to an AI-driven cyberattack that resulted in a data breach.
“This month, Chainalysis detected an external actor using offensive agentic techniques to gain unauthorized access to Chainalysis systems and internal tools,” the company said.
The incident, it pointed out, is not related to the recent $6.36 billion Binance heist that was blamed on North Korean hackers.
According to Chainalysis, the attack did not result in the compromise of investigation content, transaction or query results, passwords in clear text, or other credentials and secrets.
“Some non-sensitive customer data, such as user IDs, full names, email addresses, and organization role labels for users provisioned on our platform were accessed, including such information relating to your organization and users,” Chainalysis said.
The company continues to investigate the full scope of the data breach and has not disclosed how many individuals were potentially affected.
Advertisement. Scroll to continue reading.
“Our teams have been working around the clock to investigate unauthorized activity, patch vulnerabilities, and harden our systems,” it said.
Chainalysis noted that it has observed an industry-wide rise in AI-driven cyberattacks, as many other tech platforms have been hit in recent weeks.
The company has been working with external cybersecurity experts and LLMs to review its security posture and strengthen it against these evolving threats.
Because names and email addresses were compromised, it recommends that users watch for unexpected authentication prompts and password reset requests, and make sure they have MFA enabled.
Related:Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
Related:Over 41,000 DHS Employee Records Leaked Online
Related:Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
Related:HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
- Fresh WordPress Vulnerability in Attackers’ Crosshairs
- Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
- TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
- Adobe, Veeam, Juniper Networks Patch Critical Vulnerabilities
- Over 41,000 DHS Employee Records Leaked Online
- HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
- Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
Latest News
- Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
- FBI Flags Over 600 Addresses Tied to North Korea’s Binance Heist
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain
- Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
- Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
- In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
- Passkeys Are Better Than Passwords. But They Are Not Enough.
Trending
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress
Passkeys Are Better Than Passwords. But They Are Not Enough.
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations
Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
Fresh WordPress Vulnerability in Attackers’ Crosshairs
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
Drupal Commerce Core Vulnerability Exploited Against Online Stores
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Barracuda has appointed Dan Fletcher as CFO.
Artemis Security has appointed Arun Singh as CGO.
General Paul M. Nakasone has joined Armadin’s Board of Directors.
More People On The Move
Expert Insights
*
Passkeys Are Better Than Passwords. But They Are Not Enough.
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)
When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)