Vishing Breaches Top Canadian Law Firms, FBI Pins Record Binance Heist on North Korea, and GM Pays $220M Privacy Settlement
David Shipley covers major cybersecurity headlines for Nov. 2, 2026: four large Canadian law firms (McCarthy Tétrault, Davies, Bennett Jones, and BLG) were breached via vishing impersonating IT on Teams and spoofed phone numbers, leading to compromised accounts and alleged large-scale file theft, while firms share intel and bring in CrowdStrike and Mandiant.
The FBI attributes the $6.36B Binance crypto theft to North Korea's TraderTraitor/Lazarus, details laundering tactics and wallet addresses, and Binance says it has covered 95% of losses.
Chainalysis discloses a breach exposing limited customer directory data.
CrowdStrike reports China-linked Vapor Panda using Artex AI at scale.
A fake Claude code extension briefly appeared in Cursor's marketplace.
GM agrees to a $220M settlement over Smart Driver data sales.
00:00 Top Stories Rundown
00:35 Vishing Law Firm Breaches
02:52 North Korea Binance Heist
05:18 Chainalysis Gets Hacked
07:07 Agentic AI Attack Surge
09:33 Fake Claude Extension Scam
11:15 GM Driver Data Settlement
13:25 Wrap Up and Sign Off