Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.
Tag: securityweek
Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.
North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack
In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
Frontline Education Data Breach Impacts Over 1.3 Million
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.
Android’s November 2026 Updates Patch Over 200 Vulnerabilities
The most severe is a critical flaw in Framework leading to remote code execution without user interaction.
Critical Node-RED Flaw Exploited in Attacks
Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.
UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028
The U.K. will likely face AI cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI…
Google Dismantles XCPE Botnet of 1.3 Million Android Devices
The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.
NATO’s Crossed Swords Exercise Brings AI Agents Into Cyber Operations Training
The NATO CCDCOE exercise in Estonia introduces AI agents and OpenAI Daybreak into joint cyber and kinetic operations training.
Over 100 European Stores Hit as Supermarket Fridge Attacks Return
Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond.
Revolve Data Breach Impacts at Least 200,000 People
Hackers accessed its online shopping platform and stole customers’ personal and payment card information.
Cybersecurity M&A Roundup: 37 Deals Announced in October 2026
Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.
Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk
The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.
Revolve Data Breach Impacts at Least 180,000 People
Hackers accessed its online shopping platform and stole customers’ personal and payment card information.
Google Introduces $250,000 Root-in-Cloud Bug Bounty Reward
The top payout is for high-impact architectural research demonstrating full administrative control.
Malicious Claude Code Extension Served in Cursor Supply Chain Attack
The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
The attackers used offensive agentic techniques to access the company’s systems and internal tools.
Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.