Oracle E-Business Suite probes began the day after patch day
Defused Cyber recorded exploratory exploits against an unauthenticated SQL injection that chains to remote code execution on affected servers.
The Latest
Binance lost $6.3B after an engineer’s laptop was compromised
Researchers attribute the largest crypto theft on record to North Korea, with about $3B frozen on-chain and the exchange promising…
Vapor Panda’s automated tooling hit 140 targets in eleven days
CrowdStrike says the China-linked group ran ARTEX at roughly 1,500 commands an hour across 200 organizations in 14 countries.
Short DDoS bursts doubled even as terabit floods collapsed
Cloudflare absorbed 18.2 million network-layer attacks in Q3, and the fastest growth came from small barrages short enough to slip…
Chainalysis says an AI-driven intruder read customer profile data
The blockchain analytics firm disclosed a break-in it attributes to offensive agentic techniques, with names and emails among the exposed…
A hacked TeamViewer host can now strike back at the viewer
TeamViewer's 15.83 release closes a high-severity memory bug that flips a remote support session against the technician holding it.
Apple warned spyware targets across 99 countries this week
A fresh round of threat notifications reached journalists and filmmakers days before final talks on the Pall Mall Process guidelines.
An unreleased Claude model wrote a working root exploit for Linux
Anthropic's research build chained a use-after-free in Multipath TCP into zero-click remote root in 53 minutes, and Ubuntu and Red…
A single shared IP fronted 1,200 lookalike shopping domains
Akamai found replacement storefronts appearing hours after takedowns, rebuilt from reused kits and payment pages that harvest card details.
Belgium took its tax portal down rather than let an intrusion spread
FOD Financien isolated infected elements and pulled MyMinfin, Tax-on-web and Biztax offline, pushing the filing deadline to November 16.
A DHS directory leaked while the agency was still investigating
A hacktivist group's leak site published internal records on more than 41,000 Homeland Security employees and contractors, apparently pulled from DHS's Okta sign-on.
Drupal Commerce orders are being lifted through a route guard gap
Drupal rates the Commerce Core access bypass 21 out of 25 and says it is already being exploited against stores…
Comcast’s Claude Code extension hid an SSH tunnel in plain sight
A tampered 2.1.313 build on Open VSX added an attacker key to authorized_keys and kept a tunnel alive after the…
An intruder moved $6.3B out of Binance in roughly twenty minutes
Analysts point to North Korea's TraderTraitor after Binance wallets on ten blockchains produced valid signatures the exchange cannot explain.
Spotlight
A reseller’s Trezor shipped with an extra board and a radio
Trezor is warning CryptoBilis buyers to build a fresh wallet after a customer found a second circuit board that reads the screen and transmits the backup phrase.
Bitdefender counts 4.85 billion scans against home routers
Televisions and smart plugs carried nearly a quarter each of the vulnerability observations in nine months of telemetry from 10.4 million routers.
Fake OpenAI and Anthropic installers hide miners behind real binaries
Check Point traced the Yoba campaign through SEO-poisoned sites and real GitHub repositories shipping DLL sideloading.
Google’s Gemini 4 Carbon doubles down on secure code
Google claims its newest model writes secure code more than twice as often as Argon and fixes flaws Chrome's team rates far better.
Features
A logic-only chain walked out of Edge without memory corruption
Orange Tsai's Pwn2Own Berlin chain used five mishandled browser features and fewer than 100 lines of code.
Alpine rebuilt its GitLab after a CVSS 10 flaw nearly landed
The distro's own forge ran vulnerable Ruby for a week, and the logs needed to rule out code execution were…
Thousands of live Gitee secrets include an AI platform admin key
A month-long scan of 7.25 million Chinese repositories produced 26,400 credentials that still authenticated when tested.
Volt Typhoon rebuilds its relay chain in under two minutes
Black Lotus Labs mapped four years of throwaway relay hops that carried at least four zero-day exploits into US networks.
Stolen school logins are hopping between districts by email
MS-ISAC flagged leaked credentials at 808 K-12 organisations and traced attacks spreading through genuine staff mailboxes.
Attackers posed as 32 AI bots to hunt for secret files
Cequence caught one actor cycling through fabricated OpenAI, Anthropic and Meta user agents against roughly 90 credential paths.