Twenty Minutes, Ten Blockchains, $6.3 Billion: Binance Says the Biggest Crypto Theft on Record May Have Started on One Engineer’s Laptop
At 20:05 UTC on Thursday, October 29, which was just after 4 p.m. on the U.S. East Coast, money started...
Month: October 2026
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today
Drupal’s security team published an advisory on Wednesday with a warning store owners should not ignore: the bug it fixes...
A Handful of Modest Microsoft Edge Bugs, One Takeover: Inside the $175,000 Chain That Turned a Web Page Into Code on a Windows PC
Here Is How Layered Defenses Help When Medium-Rated Flaws Get Chained TogetherMicrosoft rated two of the Edge bugs involved as...
808 School Systems Were Told Their Staff Logins Were for Sale. Here Is How Attackers Use One District to Break Into the Next
More than one in eight. That is the share of K-12 organizations in MS-ISAC, the Multi-State Information Sharing and Analysis...
GitHub’s New npm Firewall Checks Code Packages Before They Install. Your Questions on How It Works, Answered
Malicious code packages have become one of the most reliable ways into a software team. An attacker hijacks a maintainer...
Virtualine, by the Numbers: The Web Host That Bragged About Ignoring Abuse Reports Loses Its Domain and Dozens of Servers
Criminals need somewhere to park their phishing pages, malware and stolen data. For several years, a provider called Virtualine sold...
Sony’s Internet Provider So-net Loses 2.6 Million Subscriber Records, and 54,000 Email Passwords Went With Them
The intruder was inside for four days before anyone noticed. When Sony Network Communications, the Sony Group company that runs...
Attackers Are Crashing Cisco Firewalls Through Their VPN Login Page: The Three Conditions, the Fixed Versions and the Stopgap
If your office VPN runs through a Cisco firewall, a stranger on the internet may be able to restart it...
CISA’s Free Microsoft 365 Settings Checker Gets Its Biggest Update Since Launch
Here Is How Layered Defenses Turn a Settings Report Into Real ProtectionMost cloud breaches at small businesses do not start...
A Vendor’s Leaked Access Key Sat on a Public Website for 14 Months, Exposing 238,000 Denver Health Plan Members
No one broke down a door in this case. A key to a health plan’s data was simply left out...
