:

SRI LANKA CONFIRMS $3M IN CYBER THEFT

SECURITY DESK1 MIN READ
SAT, MAY 9, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Sri Lanka's government disclosed a second major cybersecurity breach within days, revealing combined losses exceeding $3 million. The incidents add to the nation's financial troubles as it recovers from its 2022 debt crisis.

The finance ministry confirmed a $2.5 million theft in one attack, followed by the discovery of another missing payment shortly after. The dual breaches underscore vulnerabilities in the country's digital infrastructure at a critical economic moment. Sri Lanka faces mounting pressure to strengthen cybersecurity protocols across government agencies. The timing is particularly problematic, as the nation continues managing fallout from its severe 2022 debt crisis, which left its economy destabilized. Authorities have not yet disclosed details about the attackers' methods or identities. The breaches highlight growing cyber threats targeting government financial systems in developing nations, where resources for defense may be limited. No statement has been released regarding recovery efforts or enhanced security measures being implemented.

■ SOURCES

TechCrunch

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.

YESTERDAYIndustry Desk

Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.

YESTERDAYSecurity Desk

Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.

YESTERDAYIndustry Desk

Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.

YESTERDAYSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.