Binance Loses About $6.3 Billion in Record Crypto Heist
October 30, 2026
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM
Threat Actors
Binance Loses About $6.3 Billion in Record Crypto Heist
Binance says a compromised DevOps laptop let attackers drain about $6.3 billion in assets, with nearly $3 billion frozen. TRM Labs points to TraderTraitor.
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting site traffic.
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi bug as a zero-day.
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
Lumen's Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns against hundreds of victims.
FBI Seizes Virtualine Bulletproof Hosting Domain in Takedown
The Justice Department seized virtualine.net, a bulletproof hosting provider used for phishing, carding and illegal content, with European and private partners.
Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the Nefilim and Hive ransomware operations.
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
A new extortion group, WhiteArmor, claims it stole 19GB of Hisense data and demands $5 million in Bitcoin. Hisense has not confirmed the unverified claim.
INTERPOL Operation Serengeti III Nets 1,462 Arrests in Africa
INTERPOL's Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered more than $105 million across African countries.
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than 2,250 Microsoft 365 tenants.
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials and 62 victims.
Cisco SD-WAN Flaw Used to Plant KeyDrift Key-Stealing Malware
October 29, 2026
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to install KeyDrift, malware built to copy the AES-256 keys protecting
CISA Flags ESXi CVE-2026-41709 and Fragnesia Linux Flaw as Exploited
October 29, 2026
CISA added VMware ESXi CVE-2026-41709 and Linux kernel flaw CVE-2026-46300 to KEV; CrowdStrike says China-nexus Warp Panda used the ESXi
Volt Typhoon’s Silent Train Relay Network Ran Four Zero-Day Attacks
October 29, 2026
Lumen’s Black Lotus Labs says Volt Typhoon used a covert relay network called Silent Train to run four zero-day campaigns
FBI Seizes Virtualine Bulletproof Hosting Domain in Takedown
October 28, 2026
The Justice Department seized virtualine.net, a bulletproof hosting provider used for phishing, carding and illegal content, with European and private
Nefilim and Hive Ransomware Affiliate Stryzhak Gets 70 Months
October 28, 2026
Ukrainian national Artem Stryzhak, 36, was sentenced to 70 months in prison for his role as an affiliate of the
WhiteArmor Gang Claims 19GB Hisense Data Theft, Demands $5 Million
October 27, 2026
A new extortion group, WhiteArmor, claims it stole 19GB of Hisense data and demands $5 million in Bitcoin. Hisense has
INTERPOL Operation Serengeti III Nets 1,462 Arrests in Africa
October 23, 2026
INTERPOL’s Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered more than $105 million across African
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
October 22, 2026
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
October 22, 2026
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.