Fake job interview opened the door to $6.34 billion Binance heist
A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. "It was not a single isolated breach or a simple phishing incident," Binance wrote in its incident report. The money left Binance wallets on October 29, in what is likely the biggest crypto heist in the history. The FBI later confirmed that North Korea was responsible, tying the attack to TraderTraitor. READ MORE...
US charges two Canadians accused of hacking US universities
A federal grand jury indicted two Canadians suspected of hacking multiple US universities and using the compromised systems to mine for cryptocurrency. 35-year-old Ryan James Roach and 41-year-old Mathiew James Stubbings now face a maximum penalty of 10 years in prison and a $250,000 fine each if found guilty of conspiracy to obtain information from a protected computer and to cause damage to a protected computer, obtaining information from a protected computer. READ MORE...
Philippine Migrant Worker Data Likely Leaked in 69GB Government Breach
An unknown threat actor managed to gain access to sensitive databases belonging to the Philippine Overseas Employment Administration, exfiltrating nearly 69GB of information on workers, contracts, and financial records, according to an analysis of a staging server used in the breach. Over 24 minutes, the attacker copied 27 backup databases with information on overseas-employment case management, including accreditation, contracts, and cashier and LandBank records. READ MORE...
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. According to the company, the attacker used an AI offensive security framework to automate reconnaissance and exploitation attempts. Based on evidence from the investigation, no WorkOS app data or production services were accessed or affected. READ MORE...
Cyberattack on French plasma stores is enough to make your blood boil
Attackers tampered with cold-storage settings used by France's civilian blood service after compromising a refrigeration supplier, the organization said. The French Blood Establishment (EFS) confirmed the incident on Tuesday, saying its own systems had not been directly targeted. Safeguards prevented any loss of blood products. The affected equipment stored blood samples and frozen plasma, including plasma intended for transfusion. READ MORE...
AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
AI-related cyberattacks are surging, with hackers stealing AI access keys to monetize them and using AI tools to speed up their intrusions. Over the past month, at least a dozen AI developer platforms were hit, with the most recent incidents involving CommandCode, Northflank, Trigger.dev, Chainstack, and WorkOS. Across all incidents, the hackers appear to have been hunting for AI access tokens they could monetize, relying on AI agents to speed up and streamline their attacks. READ MORE...
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
In 2023, malware tracked as BlackLotus became the first publicly documented in-the-wild UEFI bootkit capable of bypassing Secure Boot on fully updated Windows 11 systems. With the industry-wide chain-of-trust mechanism subverted, the malware was able to run malicious code before Windows was fully loaded and many security defenses were operational. Microsoft had already patched the vulnerability that BlackLotus exploited in 2022. In 2023 and 2024, Microsoft issued additional updates. READ MORE...
Poisoned cPGuard update hits thousands of web hosting servers
An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to nearly 3,000 customer servers. OPSShield, the company behind the security suite, also confirmed that the attacker made off with customer contact information and hashed passwords from the firm's billing and licensing server. The attacker uploaded fake cPGuard updates to OPSShield's update storage on November 2, 2026. READ MORE...
AI policy wonks declare 'sovereign agents' a threat to civilization
The Center for a New American Security posits that the next big threat from our future AI overlords involves "sovereign agents" acting on their own and regularly improving themselves. These are AI agents that operate outside of human control and "pursue open-ended, evolving survival," AI policy researcher Ben Hayum said in a Tuesday report from the bipartisan national security think tank, which was founded by Washington insiders with experience in diplomacy and military affairs. READ MORE...
- ...in 1916, American broadcast journalist Walter Cronkite, known as "the most trusted man in America", is born in Saint Joseph, MO.
- ...in 1922, archaeologist Howard Carter's expedition finds the entrance to the tomb of of the Egyptian pharaoh Tutankhamun.
- ...in 1979, the Iran hostage crisis begins when supporters of the Ayatollah Khomeini overrun the US embassy in Tehran, taking more than 90 hostages.
- ...in 2010, former Cincinnati Reds manager George "Sparky" Anderson, who led the team to two consecutive championships in 1975 and 1976, passes away at his home.
