security

Blockchain intelligence firms TRM and Chainalysis attribute a record $6.36 billion hack on Binance to North Korea's TraderTraitor hacking unit, marking the largest cryptocurrency theft on record. Binance says it froze roughly $3 billion and will cover all user losses.

Northflank, a developer deployment platform, disclosed a security breach after Wiz issued a threat alert, prompting rapid patching and advising users to rotate environment variables immediately.

文章质疑所谓黑客从 SBF/FTX 盗取 60 亿美元比特币的说法，认为这一盗窃在技术上不可能发生。

Hackers drained approximately $6.3 billion in cryptocurrency from Binance wallets across at least ten blockchains in about 20 minutes, marking the largest crypto heist in history. Crypto tracing firms TRM Labs, Chainalysis, and Elliptic say the attack resembles the work of North Korean group TraderTraitor, with roughly half the stolen funds frozen so far.

The official Claude Code VS Code extension was compromised in a supply-chain attack that installed a persistent SSH backdoor on affected machines, highlighting ongoing risks in the software distribution ecosystem.

Report of backdoors discovered in the Claude Code for VS Code and Cursor editor extensions, highlighting a supply-chain security incident affecting popular AI coding tools.

HuggingModels 分享了一个基于 RoBERTa 的模型，可自动对漏洞报告的严重程度进行分类，训练数据来自真实的漏洞评分，旨在帮助安全团队更高效地处理海量 CVE。

A technical writeup showing that curl 8.12 through 8.16 accidentally became Turing-complete via variable slicing and unbounded config-file includes, allowing any two-counter Minsky program to be compiled into config files, until curl 8.17 added a five-level include cap that breaks the reduction.

Phorion detected a backdoor in the official Claude Code for VS Code extension (v2.1.313) on the Cursor Marketplace that installs a persistent SSH backdoor and drops attacker SSH keys across macOS, Linux, and Windows. Cursor has removed the release, and organizations are urged to audit affected environments immediately.

Binance users express confidence in the platform's fund safety following the theft incident. CZ retweeted and responded with an emoji, emphasizing that the industry leader's reputation remains unshaken despite the largest theft in history.

Canada's major banks — RBC, TD, CIBC, and BMO — announced they will block personal AI agents such as Meta's Muse and OpenAI's ChatGPT from accessing clients' online bank accounts, citing safety and security concerns amid reports of unauthorized third-party AI agent activity in accounts at major U.S. banks.

CVE-2026-98432 is a use-after-free in the Linux kernel's IPv4 TCP handshake path that could allow remote exploitation, with a Linux CNA CVSS of 9.8 and Red Hat's preliminary 8.1 score, while Anthropic's Frontier Red Team demonstrated remote root execution against an MPTCP listener; the article reviews patch validation and distribution-specific remediation steps.

KyberNetwork acknowledges a Binance hot wallet exploit, stating it is monitoring the situation and will block any identified attacker wallets from using KyberSwap while urging users to stay vigilant.

The author woke up to discover that Binance appeared to have been hacked and observed that social media discussions focused on when to buy the dip, the future of crypto security, Binance’s compensation plan, and whether the market would turn bullish or bearish. Almost no one questioned whether Binance would disappear with users’ funds or refuse to compensate them, reflecting users’ strong trust in the exchange.

Elon Musk quote-posts a breaking report from The Kobeissi Letter claiming Binance has been hacked, with $5.7 billion in outflows across Ethereum, Bitcoin, and TRON wallets — potentially the largest crypto hack in history.

An article exploring how to detect and clean up dormant or 'zombie' accounts in Active Directory environments, highlighting the security risks these stale credentials pose to enterprise networks.

Paolo Ardoino reported that Tether froze over 1.567B USDT connected to a potential Binance exchange hack, with CZ of Binance acknowledging the action as a 'life saver'.

Better Auth is pre-announcing a security release because AI agents can instantly launch broad-scale attacks once vulnerabilities are disclosed, echoing last week's php2shell incident where millions of automated attacks hit within hours of disclosure.

David Buchanan analyzes how the C2PA content provenance ecosystem would handle a certificate authority compromise similar to the eMudhra incident, highlighting that current C2PA media verification tools lack revocation-checking support entirely.

Joshua Kushner's Thrive Holdings is acquiring ADT in an all-cash deal valued at $7.6 billion, taking the home security company private in a move framed as bringing AI to traditional businesses.