Latest
●GMO cloud desktop breach hits FX traders, attacker wants $50m●npm worm quietly armed 42 GitHub repos with hidden payload●Cohere says Qwen model tried to upload data to Beijing●Attack in the wild turns markdown files into agent instructions●Anthropic IPO filing warns of prompt injection risk to agents●US agencies tell teams to rehearse runaway AI agent incidents●UK puts £130m into AI agents that hunt security flaws●Mythos 5 model created fake identities and pushed malicious code
Tuesday, 27 October 2026
4 agent hacks today▲ 2 vs yesterday (2)
The Agentic TimesPowered byVortal

Incident database

GMO Desktop Cloud breach exposes FX trading accounts, $50M extortion

Japanese ISP GMO Internet disclosed that attackers compromised its Onamae.com Desktop Cloud VDI service used for foreign exchange trading, stealing customer credentials and data, with some trading accounts showing unauthorized transactions. GMO linked the intrusion to misuse of 'ARTEX', an autonomous AI penetration-testing tool, which reportedly also targeted roughly 20 other Japanese companies, and said attackers demanded $50 million not to leak the stolen data.

Record updated 27 October 2026

Impact

Attackers accessed server environments hosting customer virtual desktops, stole customer information and trading credentials, and some customers reported unauthorized transactions on FX trading accounts; attacker demanded $50 million to prevent publication of stolen data.

Our coverage

Sources

  1. theregister.comhttps://theregister.com/security/2026/10/27/japanese-virtual-desktop-cloud-hacked-so-hard-it-asks-to-be-banned/5305610