Binance traces $6.3B incident to compromised DevOps laptop
On the radar
05 TOP STORIESBleepingComputer · 3 min read
Binance traces $6.3B incident to compromised DevOps laptop
Binance attributes the theft to a compromised DevOps engineer's laptop. The Hacker News reports about $6.3 billion in assets affected and nearly $3 billion frozen on-chain so far. Other outlets cite $5.6B to $5.8B, so the total is not settled. A single endpoint with privileged access reaching this scale makes engineer workstations the prime target.
The Hacker News · 5 min read
Official Claude Code VS Code extension trojanized with persistent SSH backdoor
Anthropic's official Claude Code extension was compromised on Open VSX and installed a persistent SSH backdoor on infected hosts. The malicious package arrived through a trusted publisher channel, and SSH persistence gives attackers durable access to developer machines. Anyone who installed or updated the extension from Open VSX should treat the host as compromised.
The Hacker News · 7 min read
Linux kernel TCP flaw CVE-2026-98432 scores CVSS 9.8
The flaw affects Ubuntu, Red Hat and other distributions. It is reportedly exploited for root access using an exploit written with Anthropic AI. If that holds, the gap between disclosure and a working exploit is shrinking. Check distribution advisories and patch kernels.
The Hacker News · 3 min read
CISA adds exploited GitLab CVSS 10.0 flaw and Cisco firewall DoS to KEV
GitLab CVE-2026-97229, an integer overflow in Community and Enterprise Editions rated CVSS 10.0, is now in KEV. So is the Cisco ASA/FTD zero-day that crashes SSL VPN devices, which Cisco has patched. Both are internet-facing, and federal due dates will set the patch clock.
The Verge · 34 min read
Anthropic files S-1 for Nasdaq IPO at possible $1.5-2T valuation
The filing is analyzed as a bet that heavy compute spending on frontier models will pay off. It makes Anthropic's finances public for the first time. It also lands the same day Anthropic's own extension was reported backdoored.
Go a little deeper
EXPLORE BY TOPIC- 53 articles
Cyber security
Developer and supply chain compromise dominated: Binance, a trojanized extension, GitHub workflow abuse and leaked credentials. Edge-device and CMS exploitation continued with Cisco, GitLab and Drupal, and several papers show agent frameworks are a growing attack surface.
Read 8 updates - 36 articles
Tech industry
AI spending is reshaping cost structures: Microsoft is offering buyouts, AWS is promising a $1T business but spending heavily, and Google admits AI search earns less. M&A was active, with DoorDash-Instacart at $17B and Thrive-ADT. Reddit's logged-in-only move shows search referral traffic eroding.
Read 8 updates - 13 articles
AI
Frontier model competition now centers on cyber capability and access policy. Google gates Gemini 4 Carbon while Mistral opens a trillion-parameter model. Agent tooling is under scrutiny, with research showing skill files that bypass human approval.
Read 8 updates - 15 articles
IT & infrastructure
The Linux 7.4 merge window dominates, with networking, I3C, RISC-V, F2FS and AMD changes landing. Systemd gaining Rust support and a proposed kernel container object are the structural stories. Fedora 45 ships Tuesday.
Read 8 updates