Binance Faces Major Security Breach, Halts Withdrawals Amidst Multi-Billion Dollar Crypto Theft
PremiumBinance paused withdrawals amid an investigation into a suspected multi-billion-dollar cryptocurrency theft impacting exchange liquidity.
Friday, October 30
Critical UEFI Firmware Vulnerability Puts Network-Booted Servers at Risk
PremiumEDK II UEFI CVE-2026-97631 allows pre-boot remote code execution on network-booting servers, affecting many data centers.
PHP2Shell Vulnerabilities Exploited in Global Cyber Attacks
PremiumPHP2Shell exploitation observed against internet-exposed management interfaces, with attackers chaining Linux kernel bugs for full compromise.
DHS Employee Data Leak Sparks Bluesky's Content Block Measures
PremiumLeaked archive exposed 41,000 DHS, ICE and CBP personnel records, prompting takedowns and content-blocking actions.
Cisco SD-WAN Vulnerability Exploited to Deploy KeyDrift Malware
PremiumState-linked actors exploited Cisco SD-WAN CVE-2026-20127 to deploy KeyDrift and steal encryption keys, threatening network confidentiality.
Wednesday, October 28
Flawed Popcorn Time Updater Puts Millions at Risk, But Help Arrives
A Popcorn Time updater ran at boot and executed code served from its update domain with full privileges.
Gheist Campaign Exploits Stolen GitHub Tokens to Access Private Repository Secrets
Gheist campaign uses stolen GitHub tokens to create workflows that leak private repo secrets into Actions logs.
Critical UEFI Flaw Exposes Servers to Early-Boot Attacks
Critical EDK2 UEFI flaw allows early-boot code execution across a wide range of servers globally.
UK Police Data at Risk: Suppliers Targeted in Repeated Cyberattacks
Report finds UK police data repeatedly breached via third-party IT suppliers over recent years.
Cyberattack Targets 953 Online Stores with Advanced JavaScript Loader
Attackers injected scanner-evading JavaScript loader code into 953 online stores, mostly Magento-based, to steal payments.
Citrix NetScaler Zero-Days Highlight Robust Defense Strategies
Advises keeping patch pipelines ready as Citrix NetScaler zero-days continue to appear and be exploited.
Cybercriminals Exploit Fake FedEx Invoices to Deploy Advanced Sirius Backdoor
Phishing emails with fake FedEx invoices deliver Sirius Backdoor hidden in blank PDFs, loading code directly into memory.
Data Breach Threatens Personal Information of 238,000 Denver Health Plan Members
Leaked SquareML access key may have exposed a database with personal and health information for 238,000 members.
Cybercriminals Exploit Convertr Analytics to Steal Payment Data
Attackers compromised a shared Convertr analytics script to skim payment card data during checkout on e-commerce sites.
HPE Addresses Critical Vulnerabilities in Aruba Networking Products
HPE releases patches for dozens of critical networking product vulnerabilities, including eight max-severity defects.
AI-Driven Cyber Attacks Target Japanese Organizations with Increasing Sophistication
TrendAI describes CyberStrikeAI using 44 AI agents to automate cyber operations targeting Japanese organizations.
Massive Data Breach Hits University of Copenhagen, Exposing Half a Million Records
Hackers stole personal data for over 520,000 people from a University of Copenhagen test environment.
Dahua IP Cameras Compromised in Ukraine Due to P2P Vulnerabilities
CERT-UA warns attackers compromised Dahua IP cameras and DVRs, changing settings and creating unauthorized accounts.
ENGIE Customer Data Breach Exposes Security Vulnerabilities
ENGIE reports attackers stole customer data after breaching a marketing platform used by business partners.
Apple Rolls Out Major Update to Patch Over 280 Security Flaws
Apple patches 286 vulnerabilities in iOS/macOS 27.2 and backports an exploited CoreGraphics fix to iOS 18.
Get these articles delivered to your inbox.
Subscribe free