Binance Loses About $6.3 Billion in Record Crypto Heist
October 30, 2026
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM
Security Spotlight
Binance Loses About $6.3 Billion in Record Crypto Heist
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM Labs points to TraderTraitor.
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus two other flaws in KB3228994.
Sony Network Communications Breach Exposes 2.58 Million Records
Sony Network Communications says an October 19 intrusion exposed 2,585,481 So-net and plala records, including Docomo Hikari customers, and 54,401 email accounts.
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
NVIDIA fixed CVE-2026-65145, a CVSS 10.0 missing-authentication flaw in the NeMo Agent Toolkit, plus five other bugs in NeMo, TensorRT-LLM and PhysX products.
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the flaw to its KEV catalog.
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers back to version 7.0.
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin Console.
Columbia, South Carolina Takes Systems Offline After Cyberattack
Columbia, South Carolina took city systems offline after suspicious activity; SLED leads the probe and the city has not said whether ransomware is involved.
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
PHP released emergency fixes for two CVSS 9.2 flaws after details leaked early, and researchers saw exploitation attempts before and during the patch release.
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024, many in critical infrastructure.
ServiceNow Patches Critical AI Platform Sandbox Escape Flaw
October 30, 2026
ServiceNow fixed CVE-2026-103093, a critical Rhino sandbox bypass that lets an authenticated admin run code on the host OS, plus
Sony Network Communications Breach Exposes 2.58 Million Records
October 29, 2026
Sony Network Communications says an October 19 intrusion exposed 2,585,481 So-net and plala records, including Docomo Hikari customers, and 54,401
NVIDIA Patches CVSS 10.0 Authentication Flaw in NeMo Toolkit
October 28, 2026
NVIDIA fixed CVE-2026-65145, a CVSS 10.0 missing-authentication flaw in the NeMo Agent Toolkit, plus five other bugs in NeMo, TensorRT-LLM
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
October 27, 2026
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
October 23, 2026
GitLab fixed CVE-2026-110264, a CVSS 10.0 regex flaw in Onigmo that can let unauthenticated users run code on self-managed servers
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
October 23, 2026
Okta fixed four Access Gateway vulnerabilities in three advisories, including CVE-2026-115547, a CVSS 9.1 command execution flaw in the Admin
Columbia, South Carolina Takes Systems Offline After Cyberattack
October 23, 2026
Columbia, South Carolina took city systems offline after suspicious activity; SLED leads the probe and the city has not said
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
October 22, 2026
PHP released emergency fixes for two CVSS 9.2 flaws after details leaked early, and researchers saw exploitation attempts before and
CISA, FBI Say SafePay Ransomware Has Hit 600+ Organizations
October 21, 2026
A joint advisory from CISA, FBI and partners says SafePay ransomware has breached at least 600 organizations since August 2024,
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.