SRI LANKA CONFIRMS $3M IN CYBER THEFT

SECURITY DESK■ 1 MIN READ

SAT, MAY 9, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Sri Lanka's government disclosed a second major cybersecurity breach within days, revealing combined losses exceeding $3 million. The incidents add to the nation's financial troubles as it recovers from its 2022 debt crisis.

The finance ministry confirmed a $2.5 million theft in one attack, followed by the discovery of another missing payment shortly after. The dual breaches underscore vulnerabilities in the country's digital infrastructure at a critical economic moment. Sri Lanka faces mounting pressure to strengthen cybersecurity protocols across government agencies. The timing is particularly problematic, as the nation continues managing fallout from its severe 2022 debt crisis, which left its economy destabilized. Authorities have not yet disclosed details about the attackers' methods or identities. The breaches highlight growing cyber threats targeting government financial systems in developing nations, where resources for defense may be limited. No statement has been released regarding recovery efforts or enhanced security measures being implemented.

■ SOURCES

► TechCrunch

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P293BOKO HARAM WEAPONIZES FRONTIER AI TOOLS

Research reveals that terrorist group Boko Haram is leveraging advanced AI technologies to enhance operational capabilities. A new report documents how the organization has integrated frontier AI systems into recruitment, planning, and execution efforts.

JUST NOW— AI Desk

P289SIX U-BOOT FLAWS OPEN DOOR TO STEALTHY FIRMWARE ATTACKS

Researchers have discovered six vulnerabilities in U-Boot, a bootloader used across millions of devices, that could allow attackers to execute malicious code during device startup. The flaws could enable persistent malware installation while bypassing security protections.

JUST NOW— Industry Desk

P282PROGRESS WARNS SHAREFILE ADMINS TO SHUT DOWN SERVERS

Progress Software is alerting ShareFile customers running Storage Zone Controllers to immediately shut down their servers due to a credible external security threat targeting the on-premises file-sharing platform.

1H AGO— Industry Desk

P284RANSOMWARE NEGOTIATOR GETS 70 MONTHS FOR $75M EXTORTION

A US court sentenced Angelo Martino, a former ransomware negotiator, to 70 months in prison for colluding with the BlackCat ransomware gang to extort $75.3 million from five of his employer's clients.

1H AGO— Security Desk

◄ BACK TO NEWS

SRI LANKA CONFIRMS $3M IN CYBER THEFT

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF