Tag: security-incident
-
Vertrauen als Angriffsfläche: Was Unternehmen aus dem Binance-Vorfall lernen können
Binance beziffert die Auswirkungen eines Sicherheitsvorfalls auf rund 6,3 Milliarden US-Dollar. Nach Angaben der Börse wurden bisher etwa 3 Milliarden US-Dollar eingefroren; der technische Ablauf wird noch untersucht. [4] Für CIOs und Sicherheitsverantwortliche rückt damit eine zentrale Architekturfrage in den Fokus: Welche kritischen Prozesse kann ein kompromittierter Zugang erreichen? Zero Trust, phishing-resistente Anmeldung und eine……
-
Vertrauen als Angriffsfläche: Was Unternehmen aus dem Binance-Vorfall lernen können
Binance beziffert die Auswirkungen eines Sicherheitsvorfalls auf rund 6,3 Milliarden US-Dollar. Nach Angaben der Börse wurden bisher etwa 3 Milliarden US-Dollar eingefroren; der technische Ablauf wird noch untersucht. [4] Für CIOs und Sicherheitsverantwortliche rückt damit eine zentrale Architekturfrage in den Fokus: Welche kritischen Prozesse kann ein kompromittierter Zugang erreichen? Zero Trust, phishing-resistente Anmeldung und eine……
-
The Cyber Express Weekly Roundup: Binance Hit by $6.3 Billion Security Incident, South Korea Busts AI-Powered Hacking Ring and More
This weekly roundup covers a $6.3 billion security incident at Binance, the arrest of a South Korean hacking ring that used generative AI to breach about 90 companies, Columbia University’s $16.1 million settlement over its 2025 data breach, a 70-month prison sentence for a Ukrainian ransomware affiliate tied to Nefilim and Hive, and Discord’s decision…
-
Binance Security Incident Affects $6.3 Billion in Crypto Assets, $3 Billion Frozen
Binance, the world’s largest cryptocurrency exchange, said on Thursday that a “security incident” on its platform affected roughly $6.3 billion worth of assets. It is one of the largest security events in the crypto industry so far, though the exchange said close to $3 billion of the affected funds had already been frozen on-chain. First…
-
Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor
Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts.The issue has since been traced to the compromise of the Cursor Marketplace, prompting the AI coding platform Cursor to briefly take down the service to remove the malware.”We…
-
Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion
Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. Binance is investigating a potential security incident after billions of dollars in cryptocurrency moved from wallets linked to the exchange on October 29. The transfers raised concerns about a possible hack, while…
-
DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail services. The company restored its browser-based File Manager on October 26, 2026. However, users affected by the incident must obtain new login credentials from their account owners before they can access their accounts.…
-
DreamHost Security Incident Forces Password Resets for Email and FTP/SFTP Accounts
DreamHost has implemented forced password resets for certain email and FTP/SFTP accounts following an incident that affected its File Manager and webmail services. The company restored its browser-based File Manager on October 26, 2026. However, users affected by the incident must obtain new login credentials from their account owners before they can access their accounts.…
-
OpenAI Paused Frontier AI Training After a Security Incident
OpenAI paused frontier model training for 11 days after AI agents exposed security weaknesses, VM escapes and covert communication channels. OpenAI published a detailed report this week explaining how it improved security in the systems used to train and test its most advanced AI models. The company also described what happened when its AI agents…
-
Indian tech company eMudhra announces withdrawal from certificate business after security incident
The issue was publicized by cybersecurity researcher Scott Helme, who published a blog saying that instead of a random 384-bit number, one of the company’s private keys was just the number four. First seen on therecord.media Jump to article: therecord.media/indian-tech-company-announces-withdrawal-certificate-business-incident
-
eMudhra Security Incident Exposes Weak Private Keys Used to Sign Trusted Certificates
Researchers discovered that private keys could be extracted from public certificate data, compromising eight intermediate certificates from eMudhra’s Certificate Authority. The incident, publicly disclosed on October 20, 2026, prompted emergency blocks across browser platforms and trust stores and revealed failures in the authority’s cryptographic key generation process. The affected certificates consist of six TLS intermediates…
-
Rank Math PRO WordPress Plugin Compromised to Spread Malware and Steal Credentials
Rank Math has reported a security incident involving malware distributed through Rank Math PRO version 3.0.123. They warn that WordPress websites using this compromised plugin are at risk if administrators activated it. The company has removed the affected files and released a clean version, 3.0.124. Rank Math PRO Compromised The incident impacts a limited number…
-
ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/19/connectwise-cloud-backup-suspended-security-incident/
-
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week
A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A security incident at BAE Systems Inc., the US subsidiary of British defense contractor BAE Systems, has taken the Bankruptcy Noticing Center offline since October 9. The Bankruptcy Noticing…
-
EU Questions OpenAI, Anthropic Over AI Agent Security Incidents
The EU is questioning OpenAI and Anthropic over AI agent security incidents, raising questions about the AI Act’s reach into model development and testing. The post EU Questions OpenAI, Anthropic Over AI Agent Security Incidents appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-eu-openai-anthropic-ai-act-agent-security-emea/
-
UK Housing Ombudsman Service investigates ‘security incident’
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-housing-ombudsman-service-investigates-security-incident/
-
UK Housing Ombudsman Service investigates ‘security incident’
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system on Tuesday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-housing-ombudsman-service-investigates-security-incident/
-
Metamask discloses security incident affecting its infrastructure
On Thursday, cryptocurrency wallet provider MetaMask has disclosed an ongoing infrastructure security incident affecting some of its infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/metamask-discloses-security-incident-affecting-its-infrastructure/
-
MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
MetaMask on Thursday said it’s responding to what it described as an “ongoing security incident” impacting part of its infrastructure.”We are actively addressing and remediating the issue internally, in coordination with external partners and security advisors,” the software cryptocurrency wallet maker said. “At this time, we have identified no immediate threat to MetaMask wallets.”MetaMask First…
-
MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
MetaMask on Thursday said it’s responding to what it described as an “ongoing security incident” impacting part of its infrastructure.”We are actively addressing and remediating the issue internally, in coordination with external partners and security advisors,” the software cryptocurrency wallet maker said. “At this time, we have identified no immediate threat to MetaMask wallets.”MetaMask First…
-
MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
MetaMask on Thursday said it’s responding to what it described as an “ongoing security incident” impacting part of its infrastructure.”We are actively addressing and remediating the issue internally, in coordination with external partners and security advisors,” the software cryptocurrency wallet maker said. “At this time, we have identified no immediate threat to MetaMask wallets.”MetaMask First…
-
LastPass Has ‘Cleared A Lot Of Hurdles,’ Strong AI Growth Ahead: CEO Karim Toubba
LastPass is seeing numerous signs of increasing momentum”, suggesting that it has taken the right steps in the wake of a pair of security incidents in 2022″, and is positioned to build on its expansion beyond password management as customers and partners embrace AI, LastPass CEO Karim Toubba tells CRN. First seen on crn.com Jump…
-
FBI reportedly declares ‘cyber security incident’ after hackers steal agents’ personal data
The bureau has not yet publicly confirmed a breach, but has told its agents that their personal information and Social Security numbers were exposed. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/28/fbi-reportedly-declares-cyber-security-incident-after-hackers-steal-agents-personal-data/
-
Leaks, data breaches, and ransom notes: The worst hacks of 2026 so far
From the massive DOGE data breach and the compromise of critical infrastructure to the hack of federal surveillance systems, here are the most damaging security incidents and data breaches of 2026 so far. First seen on techcrunch.com Jump to article: techcrunch.com/2026/09/15/the-worst-hacks-and-breaches-of-2026-so-far/
-
SaaS API Security Incidents: What 2026 Breach Data Shows
Key TakeawaysAn analysis of 60 disclosed API breaches in 2025 found broken authentication caused 52 percent of incidents, with unsafe consumption of third party APIs accounting for another 27 percent.SaaS companies accounted for 8 percent of breaches in that same… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/saas-api-security-incidents-what-2026-breach-data-shows/
-
Liquid Network Hackers Demand Bug Fix Before Returning $320M BTC
The Liquid Network security incident has taken an unusual turn after the unidentified actors behind the theft of nearly 4,000 BTC offered to return “most” of the funds, but only after the vulnerability that enabled the exploit is fixed across the network. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/liquid-network-security-incident/