The FBI, with the Secret Service and IRS Criminal Investigation, officially attributed the theft of more than $6 billion in virtual assets from Binance to TraderTraitor, a North Korea-aligned group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces and UNC4899.
A researcher released a proof-of-concept for 'SMS of Death' (CVE-2026-58882), a recently patched Android vulnerability that lets attackers remotely disrupt cellular service or crash phones with a specially crafted text message.
Cloud hosting platform Northflank told customers to rotate all credentials and secrets stored on its platform after a security breach led to unauthorized use of customers' AI API keys.
A CVSS 10.0 flaw in Canonical's LXD and MicroCloud let an attacker who could reach the HTTPS API and held a trusted client's public certificate log in as that client without its private key, gaining access to the cluster and its virtual machines.
Malicious code that replaced a page-speed script Polymarket loaded from DebugBear sold signed-in traders' positions and moved their funds to the attackers on October 29. Polymarket is refunding about $2.7 million to 726 affected wallets.
CISA added Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog, including CVE-2026-111357 (CVSS 8.8), a missing authentication check for a critical function that allows privilege escalation, and CVE-2026-118527 (CVSS 4.3), a predictable identifier flaw.
Kaspersky detailed a highly sophisticated infection chain targeting a custom Windows 10 build used exclusively by government entities in Asia, which deploys NetamLoader, a previously undocumented .NET assembly-loading framework.