About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. "Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer's laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions," the exchange said in a security update published early on October 30. READ MORE...
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute cryptocurrency-draining JavaScript, with approximately $2.5 million in assets traced to a suspected attacker wallet. The company confirmed the security incident, saying it had identified and fixed the issue affecting its international platform, Polymarket.com, and referred the breach to law enforcement. READ MORE...
Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to Dream researchers. The snoops began exploiting these servers on October 23, targeting organizations across the US, Japan, Taiwan, and South Korea. The attackers also honed in on US government-affiliated firewalls. READ MORE...
Attackers are managing to sneak low-grade phishing emails through brand name email security products, as evidenced by a recent Anthropic impersonation campaign. The campaign, described in a new blog post by Cofense, won't impress anybody. Since September, an unidentified threat actor has been sending out emails around the world, pretending to grant early access to Anthropic's cutting-edge artificial intelligence (AI) technology. Their goal: stealing Google and Microsoft account credentials. READ MORE...
Adobe, Veeam, and Juniper Networks have released patches for over three dozen vulnerabilities across their products, including multiple critical-severity code execution flaws. This week, Adobe fixed 12 vulnerabilities in Campaign Classic, Connect, Creative Cloud, and Substance 3D Painter. The Campaign Classic update resolves eight critical-severity bugs, including code/command injection, incorrect authorization, and XSS issues. READ MORE...
Drupal is urging online store owners to patch a highly critical access bypass vulnerability in the Commerce Core module, warning that it is being exploited in the wild. Tracked as CVE-2026-118539, the issue affects a contributed module that adds e-commerce features to Drupal websites, including a shopping cart and checkout process. Drupal's statistics show the module is used on more than 42,000 sites. READ MORE...
A cryptomining and backdoor campaign that abuses Hugging Face model repositories came back within days of being taken down. Its most popular malicious model was downloaded more than 28,000 times. Separately, researchers flagged a fake Solana starter kit on GitHub, live since late 2025, that is positioned to trick AI coding agents into installing a remote access trojan. Researchers at Pluto Security found 31 malicious repositories across seven Hugging Face accounts since September. READ MORE...
Socket's threat researchers found three malicious Firefox extensions that impersonated the Phantom, Jupiter, and Bitget crypto wallets. Once installed, the malicious extensions stole recovery phrases and private keys, which would provide the attacker with full control of a wallet. A crypto wallet is an app, browser extension, or physical device that lets you manage cryptocurrency such as Bitcoin. READ MORE...
Patients walk into a doctor's office and are swiftly asked permission for artificial intelligence (AI) scribes to document notes full of sensitive health information. That intake conversation is just one entry point as AI is now embedded throughout the patient life cycle, accessing more data than most organizations can secure. This raises significant concerns for a sector that historically struggles to secure legacy equipment and highly sought-after data, even before AI was added to the mix. READ MORE...
Threat actors can sabotage AI models by tampering with their underlying infrastructure, such as the firmware and software powering the computers that run the models, the security firm Eclypsium said in a report published on Thursday. "A subtle runtime change could bias the model toward weakening certificate validation, selecting an unsafe dependency, or generating a specific insecure pattern," according to the report. READ MORE...
Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender's 2026 IoT Security Landscape Report. The analysis covered approximately 10.4 million protected home routers between January and September. Televisions represented 22.7% of vulnerability observations, followed by smart plugs at 22.4% linked with a known software flaw. READ MORE...
Multiple vulnerabilities in five popular AI developer tools could allow attackers to execute code on a host machine, read and steal files, or spoof browser address bars. Researchers say flaws in OpenAI's Codex and Microsoft's VS Code remain unpatched, potentially putting developers who use affected configurations at risk. AI security startup Forever Security discovered vulnerabilities in Cursor, GitHub Copilot, Anthropic's Claude Desktop, VS Code, and Codex. READ MORE...