Download MP3 · 6:37 · 6.1 MB
Security News
Binance $6.3B Cryptocurrency Heist — North Korea TraderTraitor
The largest cryptocurrency theft in history was confirmed by Binance CEO Yi He. North Korea's TraderTraitor group stole six point three billion dollars in just twenty minutes via a compromised DevOps engineer's laptop. Approximately three billion dollars has been frozen on-chain by Tether and Circle. The Ronin and Bybit hackers are the same actors.
Claude Code Backdoor on Cursor Marketplace — 5,000 Developers at Risk
A malicious version of the Claude Code VS Code extension circulated via Cursor's marketplace for eleven hours on 29 October 2026, exposing up to five thousand developers. The malware installed persistent SSH reverse tunnels for remote access. Anthropic denied any compromise of its own systems. If you installed or updated this extension on Cursor between late afternoon and evening on 29 October, assume compromise and follow Microsoft's remediation guide.
Critical Linux MPTCP Kernel RCE — Anthropic Researchers
Anthropic's security research team disclosed a critical Linux kernel vulnerability in Multipath TCP listeners allowing unauthenticated remote root execution. A working exploit exists. Audit MPTCP exposure across enterprise Linux deployments immediately.
Max-Severity GitLab CVE-2026-97229 — Actively Exploited
Unauthenticated remote code execution on self-hosted GitLab servers. Confirmed exploitation in the wild against Alpine Linux deployments. GitLab patched in early October — apply now if you haven't.
Drupal Commerce Core + WordPress RCE — Both Actively Exploited
Drupal issued an emergency warning for a critical access bypass in Commerce Core. WordPress has a separate race-condition RCE vulnerability. Both are under active exploitation.
GCHQ Missing Storage Drives — UK ⚠️
The Investigatory Powers Commissioner's annual report revealed GCHQ has been aware for years that thousands of storage drives containing sensitive data are missing. The total count remains unconfirmed.
Florida 4.9M SSN Breach — Education Dept Financial Aid Site
Florida's Department of Education notified approximately four point nine million people of Social Security number exposure following a breach of the student financial aid portal discovered 19 October 2026.
DOJ Ghost Student Fraud Charges
Five individuals charged in the first federal crackdown on AI-assisted ghost student fraud — stolen identities and AI-generated coursework used to enrol fake students and collect federal loan payments across multiple institutions.
AD CS ESC1/ESC8 Abuse via Help Desk Impersonation (Microsoft)
Microsoft Security published analysis of help desk impersonation pivoting to Active Directory Certificate Services abuse via ESC1 and ESC8 escalation paths — turning a single IT support call into domain controller compromise.
Ransomware Activity
8 new victims today across 4 groups.
SilentRansomGroup / LEAKEDDATA
- Moritt Hock & Hamroff LLP — US, Legal sector (second major law firm this week)
- 3 additional victims
Wallstreet
- Suburban Orthopaedics — US, Healthcare ⚠️ CNI
Rhysida
- Cipsa Industrias — Mexico, Manufacturing
Whitearmor
- KTU Shipyard — Philippines, Maritime
Doommageddon
- 1 masked victim
Threat Feed Activity
French Government Payment Agency Breach
143,000 records including beneficiary payment information and personal data stolen from a French government payment agency database.
Rassemblement National Data Leak — France
150,000 records belonging to Rassemblement National members leaked — names, home addresses, and electoral constituency data. Politically sensitive dataset.
BitMart 1.2M User Records Exposed
Cryptocurrency exchange BitMart has had one point two million user records exposed. A difficult week for crypto security following the Binance heist.
Other News
n0n Ransomware Operator Exposed Own Attack Server
A threat actor spent over seven thousand dollars on AI services attempting to breach twenty-three organisations across fourteen countries — then left their entire attack server publicly exposed, with all tooling, victim data, and methods visible.