LIVE · cybersecurity feed
Live wire
U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacksCISA Announces Enhanced Reporting Form for Cyber IncidentsCVE-2026-19868 · CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible ExploitationCVE-2026-119757 · BTCPay Server Insufficiently Protected Credentials Flaw Exploited Upon DisclosureCVE-2026-118066 · LatePoint Improper Authentication Vulnerability Exploited Upon DisclosureCVE-2026-120534 · ACF Extended Advanced Custom Fields PRO Flaw Exploited Upon DisclosureCVE-2026-109884 · Elementor Website Builder Flaw Exploited Same Day As DisclosureCVE-2026-19868 · SonicWall SonicOS SSLVPN Vulnerability Exploited On Day Of DisclosureCVE-2026-103898 · Wpmet wp_social_login_and_register_social_counter Flaw Exploited Upon DisclosureCVE-2026-116512 · weDevs wp_project_manager Flaw Exploited Before CVE Publication
nation-state

FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers

Patrick Steven Yaroch, a 37-year-old Supervisory Special Agent formerly assigned to the FBI’s Counterintelligence and Espionage Division, has pleaded guilty to wire fraud and money laundering charges. Yaroch admitted to siphoning more than $2.4 million in cryptocurrency from digital wallets seized or monitored during federal investigations. The illicit activity, which spanned from December…

ZeroDay News ·

Source: The Record

Photo: Raymond Wambsgans (CC BY 2.0) via Wikimedia Commons

Patrick Steven Yaroch, a 37-year-old Supervisory Special Agent formerly assigned to the FBI’s Counterintelligence and Espionage Division, has pleaded guilty to wire fraud and money laundering charges. Yaroch admitted to siphoning more than $2.4 million in cryptocurrency from digital wallets seized or monitored during federal investigations. The illicit activity, which spanned from December 2024 until his confession in July 2026, involved approximately 100 unauthorized transfers from 79 distinct wallets linked to 35 separate FBI cases.

According to the Department of Justice, Yaroch leveraged his senior position and security clearance to gain access to internal FBI systems containing sensitive credentials, including private keys and passwords. These assets were tied to ongoing investigations into at least two unnamed foreign nation-states and 10 individual crime victims. Prosecutors stated that the theft was indiscriminate, with individual transactions ranging from as little as 81 cents to as much as $580,000.

Yaroch reportedly utilized the stolen funds to settle significant personal debts, including credit card balances, loans, and vehicle payments. Digital evidence recovered by investigators, including logs from his interactions with ChatGPT, indicated that he had broader ambitions for the stolen assets. He allegedly planned to purchase a vineyard in Portugal and had already begun making legal arrangements and purchasing international plane tickets for himself and his family for a scheduled departure in September 2026.

The motive for the initial theft appears rooted in professional frustration. Yaroch confessed to a Department of Justice employee—a former colleague—that he had become disillusioned with the FBI’s inability to effectively disrupt a specific suspect from an adversarial nation. He claimed that his decision to confess was driven by feelings of guilt and the psychological burden of his actions, stating that the situation had been weighing heavily on him.

The FBI has confirmed that Yaroch’s actions caused significant operational damage. By accessing and draining these wallets, he compromised the integrity of multiple ongoing investigations into both criminal syndicates and foreign intelligence services. Furthermore, the unauthorized activity exposed sensitive FBI sources and methods to the very targets under surveillance, potentially alerting them to the fact that their digital assets were being monitored or controlled by federal authorities.

The investigation into Yaroch’s conduct revealed a systematic abuse of his access privileges. While he initially framed his actions as a response to his inability to stop foreign adversaries, the scope of his theft extended well beyond those targets to include victims of unrelated crimes. The Department of Justice noted that his activities were not limited to a single instance but were a sustained pattern of behavior over an 18-month period.

Yaroch remains in custody following his guilty plea. He faces a maximum sentence of 20 years in federal prison for the combined charges of wire fraud and money laundering. His sentencing hearing is currently scheduled for March 2027. The FBI has not provided further comment on the specific security measures being implemented to prevent similar internal breaches of sensitive investigative data.

nation-state
ShareXLinkedInWhatsAppFacebook

More News

view all →
nation-state

IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus

Ireland faces a critical need to bolster its national security infrastructure to counter a rising tide of sophisticated cyberattacks and hybrid threats. Ahead of the IRISSCON 2026 conference held at Dublin’s Aviva Stadium, experts have characterized the current state of national readiness as potentially inadequate. The discourse centers on the necessity of moving beyond isolated defensive…

vulnerability

Anthropic Rolls Out Mythos 5.2 With Improved Bug Hunting, Fewer Sandbox Escapes

Anthropic has officially released Claude Mythos 5.2 and Claude Fable 5.2, the latest iterations of its AI models designed for specialized security and general-purpose tasks. While both models share the same underlying architecture, they differ significantly in their operational guardrails. Mythos 5.2 is an access-restricted model intended for vetted organizations participating in Anthropic’s…

security

Default Admin Password Let Researchers Unlock and Start Cars

Security researchers Shubham Shah and Sam Curry have disclosed a series of vulnerabilities that allowed them to remotely unlock and start vehicles by compromising the identity management infrastructure of two unnamed automotive brands. The researchers detailed their findings in separate reports published in early November 2026, noting that the flaws affected customer accounts across the United…

CVE-2026-123218

IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to remediate two critical vulnerabilities currently being exploited in the wild. The agency added CVE-2026-123218, affecting IBM Aspera Faspex, and CVE-2026-116779, impacting SignalWire FreeSwitch, to its Known Exploited Vulnerabilities (KEV) catalog. Under the requirements of…

breach

Binance Investigates ShinyHunters Breach Claims

Binance is currently investigating claims made by the threat actor group ShinyHunters, which alleges it has successfully breached the cryptocurrency exchange’s systems. On November 4, 2026, the group posted an advertisement on the PwsForums platform, asserting that it had obtained approximately 335.9 million records. The attackers are demanding a payment of $900,000, threatening to leak the…

security

France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites

The French government has formally attributed a cyberattack targeting refrigeration controllers across approximately 700 retail locations to a cyber unit associated with Iran’s Islamic Revolutionary Guard Corps (IRGC). The incident, which occurred on the night of October 11, involved unauthorized access to industrial control systems used to manage temperature settings in commercial food…