AI
Backdoored: North Korea Hits 140 Mastra npm Packages
Sapphire Sleet compromised a single dormant npm account and poisoned 140 Mastra AI packages in 88 minutes. The malware ran on install, not import.
Latest — Page 17
Deals
Hits $2B Revenue, Kalshi Eyes IPO
Kalshi hit $2B in annualized revenue, doubled its valuation in five months, and is now talking to banks about an IPO it won't need until 2027.
Deals
Memento Raises $93M, Buys VEGF-Tie2 Eye Bispecific
Memento raised $93M and licensed a VEGF-Tie2 bispecific for nAMD and DME, conditions driving $4.4B in U.S. Eylea franchise sales last year.
AI
UK Pays $400K for AI That Calls 13-Year-Olds Adults
The UK spent $400K on face-scanning AI it knows misidentifies 13-year-old girls as adults, and still plans to deploy it on asylum seekers by 2027.
Legal
USTR Files Section 301 Against Germany Drug Pricing
USTR just filed Section 301 against Germany's €16B drug cost-cut plan. The UK deal is the blueprint, and a Sept. 22 hearing is now on the calendar.
Legal
Leaked: EU Commission Banking Draft Eyes Basel III Relief
EU Commission's leaked banking draft proposes Basel III relief for smaller lenders and capital relief on mortgages, but falls short of banks' ask.
Deals
Disabled: Salesforce Cuts Klue App After OAuth Token Theft
A dormant API credential let Icarus harvest OAuth tokens from Klue, taking CRM data from Huntress and prompting Salesforce to pull the plug.
Deals
Icarus Hacked 7 Firms via Klue OAuth Breach
Icarus extortion group turned a dormant Klue API credential into a Salesforce pivot hitting Recorded Future, Huntress, and five more firms.
Legal
CISA Orders Splunk Patch by Sunday Under BOD 26-04
With 1,400+ Splunk instances exposed online, CISA just gave federal agencies three days to patch a 9.8-severity flaw attackers are already hitting.
FDA
Warned: Zoll Counted 27 Complaints, FDA Found 50
Zoll labeled its 731 ventilator hazard life-threatening, classified the likelihood as remote. FDA's April warning letter found 23 missing complaints.
FDA
Denali Sells Avlayah PRV for $195M
Denali pockets $195M from its Hunter syndrome voucher, nearly topping Jazz's January record as the restored PRV program recalibrates.
Legal
CISA Orders Splunk Patch by June 21 for Active RCE
CISA's hard patch deadline for an actively exploited Splunk RCE hits agencies that use the same platform to detect intrusions in the first place.
FDA
Cleared 9-0: Moderna mFluvisa Puts $1B in Play
FDA adcomm voted 9-0 for Moderna's mFluvisa after Prasad's RTF letter threatened a $1B revenue opportunity and the 2028 breakeven goal.
Legal
Vendor Breach Exposes 3M Texas Hunting Licenses
Three million Texas hunters and anglers had their driver's licenses and passport numbers exposed — and TPWD still won't name the vendor.
Legal
Leaked: Nintendo Employee Files After $2M Demand
Shadowbyt3$ leaked Nintendo employee W-9s and bank statements after the company refused a $2M ransom demand routed through a WebMD subsidiary.
