Security News
Binance Investigates Potential Multi-Billion Dollar Security Breach (BleepingComputer) — The world's largest crypto exchange is investigating reports of 5.6–5.8 billion dollars in digital assets transferred from hot wallets to a newly created Ethereum address. If confirmed, this would be the largest crypto theft in history.
Polymarket Halts After Crypto-Draining JS via UK Third-Party Vendor (BleepingComputer) — A malicious JavaScript library embedded through a UK vendor siphoned approximately 2.5 million dollars before detection. Another supply chain compromise, this time in the DeFi space.
83 Supply Chain Attacks Hit 61 Open Source Repos in Under an Hour (The Register) — Attackers exploited misconfigured CI/CD pipelines to inject malicious code into projects including Google LangExtract, Trivy, Brave browser, and MLflow. The speed and scale made this one of the most coordinated open source attacks on record.
Fragnesia + PHP2Shell Exploit Chain Hits US Government Orgs (BleepingComputer) — Actively chained exploit targeting 25 confirmed victims including Palo Alto Networks firewalls at US government organisations. CISA added Fragnesia to its KEV catalogue.
Cisco ASA/FTD Zero-Day Crashes SSL VPN — Actively Exploited (BleepingComputer) — Unauthenticated remote attackers can crash and restart Cisco ASA and FTD SSL VPN devices. Emergency patches are available; apply immediately.
Cisco SD-WAN KeyDrift Malware Tied to Volt Typhoon (SecurityWeek) — The KeyDrift malware strain, observed on Cisco SD-WAN devices, has been attributed to Volt Typhoon's Silent Train campaign — China's CNI pre-positioning group.
NIK C2 Framework Uses On-Device AI for Autonomous Post-Exploitation (Cisco Talos) — NIK integrates a locally-running AI model inside its implant to direct post-exploitation actions autonomously, reducing operator callbacks and detection surface.
Belgium Tax Agency Offline Before Filing Deadline (The Register) — The MyMinfin portal was knocked offline by a cyberattack days before a national filing deadline, disrupting hundreds of thousands of taxpayers.
iRhythm: 8.2 Million Healthcare Records Exposed (SecurityWeek) — The cardiac monitoring company confirmed a breach affecting 8.2 million patient records.
Japan Airlines: 92,000 Passengers Affected by Amadeus PSS Breach (The Record) — Updated figure is substantially higher than the initial 2,000 reported in early coverage of this incident.
PwC Data Breach Claim — 250 GB Azure Data, 10 GB PII (Threat Intelligence) — A threat actor is claiming to have exfiltrated 250 GB of Azure data, 10 GB of PII, and a full GitHub organisation dump from PwC. The firm was also targeted by Everest ransomware on 22 October.
CISA Known Exploited Vulnerabilities
CISA added the following to the KEV catalogue on 30 October 2026:
• Fragnesia Linux kernel privilege escalation — actively exploited in the wild, chained with PHP2Shell to compromise servers at US government organisations. See CISA KEV catalogue for remediation guidance.
Ransomware Activity
22 new victims posted since yesterday morning across 10 ransomware groups.
Booba Project (7 victims):
• Terrebonne Parish Government (US, Government) ⚠️
• Circleville Police Department (US, Government) ⚠️
• South Weber City (US, Government) ⚠️
• California School Boards Association (US, Education)
• National Association of Credit Management (US, Financial Services)
• Programs for Parents, Inc. (US, Education)
• LifeFone (US, Healthcare) ⚠️
Rhysida (2 victims):
• INTAX, Inc. (Financial Services)
• ClaimTek Systems (Financial Services)
RHYSIDA (1 victim, via threat feed):
• INTI International University & Colleges (Malaysia, Higher Education)
Shiba (4 victims):
• Antwerp House Dentistry (GB, Healthcare) ⚠️
• Friendly Senior Living (Healthcare) ⚠️
• Morgan White Group (Professional Services)
• IT Foods Industries (Agriculture)
Global Secret Group: TDS Telecommunications LLC (US, Energy & Utilities)
Everstake: 4 technology/unnamed targets
Whitearmor: rolly.io (Technology)
Emperador: LA PROFUMERIA SRL (IT, Retail), MAA Group Consulting Engineers
Krybit: Viehhauser KFZ (AT, Transportation)