Binance Hack: How a Fake Job Interview Reached the Wallet Signing Service

A coding assignment sent to a job-seeking Binance engineer in September ended with about $6.3 billion in crypto leaving the exchange on October 29. Binance’s November 3 initial report... Read more »

Agents on the Attack Side: AI-Driven Intrusions Move From Research Demo to Incident Report

A ransomware crew spent more than $385 on AI models for each organization named in its records, SOCRadar found. Microsoft and Wiz separately documented October intrusions in which agents... Read more »

Binance Hack: “User Funds Are Safe” Now Rests on Binance’s Own Balance Sheet

Binance told customers on October 29 that their funds were safe, about an hour after billions of dollars began leaving its hot wallets. The exchange’s own reserve data complicates... Read more »

Cloudflare Deployed php2shell Protection Hours Before Disclosure. Here’s What the Head Start Doesn’t Cover

Two flaws in PHP can hand an unauthenticated attacker remote code execution, and PHP says a demonstrated attack on Apache with mod_php fires before the website’s own code runs.... Read more »

Hackers Heated French Supermarket Fridges Up to 50°C. The Real Gap Is Who Maintains the Controllers

Overnight on 11 to 12 October, attackers took control of the refrigeration controllers in hundreds of French supermarkets and drove cabinet temperatures as high as 50°C. Les Mousquetaires, the... Read more »

Denmark’s Hackers Didn’t Need Skill, They Needed an AI and a Bad Password

A single compromised vendor account just exposed personal records on 8.8 million people, more than Denmark’s entire population, pulled from the country’s national identity register. The attacker says an... Read more »

Albert Heijn’s Cybersecurity Incident: Checkouts Work, but Some Distribution Centers Don’t

Albert Heijn’s stores are open and its checkouts work. Its distribution centers are a different story. On Monday, CEO Margaret Versteden-van Duijn told NOS that work had stopped completely... Read more »

How Content-Addressed Storage and Blockchain Can Improve Digital Credential Verification

How content-addressed storage, immutable state, and explicit lifecycle events can make digital credentials easier to verify Digital Credentials Have a Verification Problem Digital certificates are easy to distribute. Verification... Read more »

Glassdoor’s Ransomware Deadline Expired Two Weeks Ago: The Data Never Showed Up

The countdown The Gentlemen set for Glassdoor ran out on September 4. Two weeks later, no stolen data has surfaced, no company has confirmed a breach, and the story... Read more »

Fake MP4 Files Are Smuggling Malware Past Security Filters: Automated Scanners Never Check If They Play

Security researchers just found a malware campaign built around a file that never plays. Censys, the internet-scanning firm that maps exposed infrastructure worldwide, tracked 18 distinct malware builds across... Read more »
Subscribe to our Newsletter