IT Security News: Overnight roundup, 2026-10-30 Summary Binance dominated the overnight window. Reports put the suspected theft at $5.7 to $6.3 billion, with billions frozen and one account blaming a compromised engineer's laptop, though the exchange has not confirmed a…
As Russia’s Cyberwar Evolves, Belarus Steps Forward
The “FrostyNeighbor” advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian…
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline
Intel Warns Of Revenue Hit From Israel Factory Blast
Intel’s shares sink 20 percent after it says deadly explosion at server chip plant in Israel to reduce revenues by $600m
Election Website Security: 42% of US County Sites Still Lack .gov Domains
US election websites show improved security, but weak email protection, non-.gov domains and third-party tracking still expose voters to risks. Millions…
NIK C2: The new AI-enabled command-and-control framework
Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.
Admin dropped the F-bomb in a password to show hackers who was really 1337
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
Amatera: How the prolific infostealer works and spreads
The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation…
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for…
ICO Reprimands Staffordshire Police After Domestic Abuse Breach
The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information
Amazon Launches Alexa Gadgets, Cuts Jobs In Devices Unit
Amazon reportedly cuts up to 250 jobs in devices unit, as it announces range of gadgets promoting updated Alexa AI service
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal…
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known…
12 Managed SIEM Services: The 2026 Buyer’s Verdict Guide
Managed SIEM’s quiet failure is dependency: two years in, the detections and parsers live in the provider’s head, and leaving means starting over. This…
Social media addiction affects older adults too
Social media addiction is often discussed as a problem affecting teenagers. Yet older adults can also spend more time on social platforms than they…
Ex-Merseyside Police Officer Founds $400m AI Start-Up
Former senior UK police officer wins Silicon Valley backing for start-up valued at nearly $400m to develop AI tools for law enforcement
ENGIE Data Breach Exposes Customer Details and Energy Contracts
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French…
MR ROBOT Malware-as-a-Service Targets Indian Bank Customers
MR ROBOT Android malware rents banking trojans that steal one-time passwords and card data
HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js
The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.…
Hackers Actively Exploiting WordPress Remote Code Execution Flaw Just Hours After Patch Release
A WordPress remote code execution vulnerability came under attack just hours after version 7.1.4 was released on October 28, 2026, fixing 22…
Anthropic’s Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits
An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept…
11 SOC-as-a-Service Providers: The 2026 Buyer’s Verdict Guide
SOCaaS is bought on the 3 a.m. question what may the provider do without waking you, and how fast does a human touch your alert? This verdict guide judges…
Infineon Plans €1.1bn Upgrade For Gallium-Nitride Chip Plant
EU Chips Act to partially fund eight-year investment to upgrade Villach, Austria factory that produces energy-efficient power chips