IT Security News: Overnight roundup, 2026-10-30 Summary Binance dominated the overnight window. Reports put the suspected theft at $5.7 to $6.3 billion, with billions frozen and one account blaming a compromised engineer's laptop, though the exchange has not confirmed a…
Claude AI Exposes Internal Sandbox Details That Help Researcher Bypass Local Connection Restrictions
A Bishop Fox researcher investigating Claude’s sandbox obtained an internal control binary, recovered authorization tokens from process memory, and…
Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw
Drupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as…
Simplifying .NET toolchain installs with dotnetup
If you’ve experimented with Rust , you already know how simple it is to get a basic toolchain in place, with the simple rustup command-line tool. The same…
5th EMPACT Hackathon leads to the detection of 51 potential victims
An international operation involving 40 experts and investigators from 20 countries has identified 51 potential victims of human trafficking, as well as…
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.
FCC Approves Amazon Leo’s $11.5bn Globalstar Buy
US communications regulator gives green light for Amazon’s bid to add GlobalStar’s two dozen satellites to its constellation
Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access
A trojanized version of the Claude Code extension, identified as anthropic.claude-code version 2.1.313, contains a malicious loader that enables…
Israel Ad-Tech Company ‘Targeted Starlink Users For Surveillance’
Researchers reportedly found Israeli ad-tech company abused ad-bidding process in effort to identify, track Starlink users
WordPress 7.1.4 Fixes 22 Security Vulnerabilities, Including RCE Flaw Under Active Attack
WordPress released version 7.1.4 on October 28, 2026, which addresses 22 security vulnerabilities. Among them is an unauthenticated remote code execution…
IT Security News Hourly Summary 2026-10-30 10h : 33 posts
33 posts published in the last hour 08:36As Russia’s Cyberwar Evolves, Belarus Steps Forward 08:35NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines 08:35Intel Warns Of Revenue Hit From Israel Factory Blast 08:35Election Website Security: 42% of US County Sites Still…
As Russia’s Cyberwar Evolves, Belarus Steps Forward
The “FrostyNeighbor” advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian…
NIST Publishes Guidance to Meet Federal Post-Quantum Deadlines
The guidance sets out how federal agencies can prioritize PQC adoption for the most sensitive systems, to meet the 2031 transition deadline
Intel Warns Of Revenue Hit From Israel Factory Blast
Intel’s shares sink 20 percent after it says deadly explosion at server chip plant in Israel to reduce revenues by $600m
Election Website Security: 42% of US County Sites Still Lack .gov Domains
US election websites show improved security, but weak email protection, non-.gov domains and third-party tracking still expose voters to risks. Millions…
NIK C2: The new AI-enabled command-and-control framework
Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.
Admin dropped the F-bomb in a password to show hackers who was really 1337
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
Amatera: How the prolific infostealer works and spreads
The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation…
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for…
ICO Reprimands Staffordshire Police After Domestic Abuse Breach
The UK’s privacy regulator has issued a reprimand to Staffordshire Police following a serious breach of personal information
Amazon Launches Alexa Gadgets, Cuts Jobs In Devices Unit
Amazon reportedly cuts up to 250 jobs in devices unit, as it announces range of gadgets promoting updated Alexa AI service
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online
The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal…
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known…