SRI LANKA INVESTIGATES $2.5M FINANCE MINISTRY HACK

SECURITY DESK■ 1 MIN READ

THU, APR 23, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Sri Lanka's government is investigating a cyberattack that resulted in the theft of $2.5 million from the Finance Ministry's systems. Treasury Secretary Harshana Suriyapperuma confirmed the breach on Thursday.

The hack represents a significant security incident for Sri Lanka's financial infrastructure. Attackers gained unauthorized access to the Finance Ministry's computer systems and successfully extracted the funds. Treasury Secretary Suriyapperuma disclosed the breach, indicating that authorities have launched a formal investigation into the incident. Details regarding the attack method, timeline, and the specific vulnerabilities exploited remain under investigation. The incident highlights growing cybersecurity risks facing government institutions in the region. Sri Lanka joins numerous countries grappling with sophisticated cyber threats targeting public sector financial systems. No additional details about recovery efforts or potential attribution have been released. The investigation is ongoing.

■ SOURCES

► Bloomberg Tech

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P581CISA WARNS: RANSOMWARE GANGS NOW EXPLOITING WINDOWS FLAW

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that ransomware groups are actively exploiting a high-severity Windows Task Host vulnerability. The flaw was previously flagged as under active exploitation in April.

1H AGO— Security Desk

P569MICROSOFT REMOVES WMIC TOOL FROM WINDOWS 11

Microsoft has begun removing the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11, citing widespread abuse by cybercriminals. The tool is being eliminated from Windows 11 versions 24H2 and 25H2.

4H AGO— Security Desk

P556ISRAEL CREATES FAKE THINK TANK TO DECEIVE AI CHATBOTS

Israel has established a fabricated think tank apparently designed to influence AI chatbot outputs and shape how these systems respond to queries about Israeli policy. The scheme highlights vulnerabilities in how large language models source and validate information.

8H AGO— AI Desk

P540HACKER SELLS 3.6M AZURE ACCOUNT RECORDS

A threat actor claims to have stolen employee databases from Microsoft Azure infrastructure across multiple Fortune 500 companies using compromised credentials. The stolen records are now being offered for sale.

16H AGO— AI Desk

◄ BACK TO NEWS

SRI LANKA INVESTIGATES $2.5M FINANCE MINISTRY HACK

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF