Fake job interview opened the door to $6.34 billion Binance heist

A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a single isolated breach or a simple phishing incident,” Binance wrote in its incident… Continue reading Fake job interview opened the door to $6.34 billion Binance heist→

North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack

In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
The post North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack a… Continue reading North Korea Launches Missiles Toward the Sea as Pyongyang Protests Against US Claims on Binance Hack→

Reading Data from an Unwilling Blood Pressure Monitor

Given the modern trend of interconnecting anything and everything, we have no doubt that somebody sells a blood pressure monitor that will push its measurements out to all sorts of …read more Continue reading Reading Data from an Unwilling Blood Pressure Monitor→

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
The post Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million appeared first on SecurityWeek.
Continue reading Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million→

Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure

Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure.

Also known as Fluffy Wolf, the threat actor has a history of targeting Russian and international companies since … Continue reading Russian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure→

Posted in Uncategorized

Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction

A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin.

The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patc… Continue reading Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction→

Posted in Uncategorized