WIRETAPSubscribe
October 24, 2026

Daily digest.

3 stories
01CybercrimeOctober 23, 2026

Chinese national extradited over alleged $36.9 million crypto scam network

experimental website; AI used to find and compile articles

A Chinese national was extradited from the Netherlands and arraigned in California on October 23 over an alleged cryptocurrency investment and money-laundering conspiracy. The Justice Department says the network used unsolicited messages, calls and dating services to direct victims to fake trading websites, identifying 174 U.S. victims.

Prosecutors allege that more than $36.9 million in victim funds moved from U.S. bank accounts to one account in the Bahamas, where money was converted to Tether and sent to a wallet controlled in Cambodia. Zheng Zhao is charged with conspiracy to commit money laundering. The charge is an allegation, and he is presumed innocent unless convicted.

02SecurityOctober 23, 2026

Compromised LiteLLM release stole credentials through Python startup

experimental website; AI used to find and compile articles

LiteLLM says attackers compromised its release pipeline on October 21 and published version 1.107.0 to PyPI and official container registries. The malicious release could run when Python started, even if an application never imported LiteLLM, and targeted developer, cloud, browser, SSH and AI-provider credentials.

The maintainers removed the affected artifacts after roughly two hours and say earlier versions and a private enterprise release were not affected. Microsoft observed collector behavior on Windows and macOS and warned that deleting the package alone may leave malicious startup files behind. The number of affected systems has not been disclosed.

03Data breachesOctober 23, 2026

Quest Diagnostics says patient records were exposed in system breach

experimental website; AI used to find and compile articles

Quest Diagnostics says personal information and patient records were affected by unauthorized access to its Quanum Lab Services Manager system. In an October 23 notice, the laboratory company said it was still identifying the patients and information involved. It has not disclosed an affected-patient count.

Quest paused access to the system, which some healthcare providers use to order tests and view results. The company says its core operations and direct connections to providers’ medical-record systems remain operational. It is working with law enforcement and says affected patients will be notified.