US Seizes $1.2B in North Korean Crypto as Vercel Binds Session Tokens

Enterprise technology teams navigated a major cloud communications disruption alongside two significant cybersecurity milestones this week. Federal law enforcement seized $1.2 billion in stolen digital assets from North Korean state-sponsored hackers, cloud platform Vercel deployed hardware-bound session authentication to neutralize cookie-stealing malware, and Microsoft rolled back an Exchange Online routing change after a widespread morning outage.

U.S. Seizes $1.2 Billion in Stolen Cryptocurrency From Lazarus Group

The U.S. Department of Justice and federal law enforcement agencies seized server infrastructure and $1.2 billion in stolen cryptocurrency linked to North Korean state-sponsored hacking groups. According to unsealed court filings, operatives affiliated with the Lazarus Group laundered funds stolen from decentralized finance protocols and cryptocurrency exchanges through a network of shell accounts and mixers.

Investigators worked with major exchange compliance teams, including Binance, to freeze digital wallets and dismantle command-and-control domains used in social engineering campaigns against technology firms. Officials described the $1.2 billion seizure as one of the largest recoveries of state-linked illicit digital assets to date.

Vercel Deploys Device Bound Session Credentials Against Cookie Theft

In the application security sector, cloud platform Vercel rolled out support for Device Bound Session Credentials (DBSC) to protect web applications and developer accounts against session-cookie theft. Developed in collaboration with browser vendors, DBSC cryptographically binds authentication sessions to a user's local hardware security module or Trusted Platform Module (TPM) chip.

Even if infostealer malware exfiltrates session cookies from a victim's browser, attackers cannot replay those tokens from a different machine without the underlying private key. Security researchers praised the deployment as a major defense against cookie-hijacking campaigns targeting enterprise software developers.

Microsoft Resolves Widespread Outlook and Exchange Online Outage

While security teams hardened authentication protocols, cloud productivity users contended with service interruptions on Thursday morning. Microsoft Outlook, Teams, and Microsoft 365 services experienced a widespread outage on Thursday morning, disrupting email delivery and calendar access for tens of thousands of users across North America.

Outage tracker Downdetector recorded more than 38,000 incident reports shortly after 8 a.m. Eastern time as enterprise and consumer accounts failed to authenticate or load mailbox data. Microsoft engineers traced the disruption to a recent routing configuration change within its Exchange Online infrastructure and began rolling back the update, restoring most affected services by midday.