IT Security News Roundup: 2026-11-03 Evening

IT Security News: Evening roundup, 2026-11-03

Summary

This period is dominated by massive financial losses in the cryptocurrency sector, highlighted by a multi-billion dollar heist and supply chain attacks. A recurring theme is the sophistication of social engineering and third-party compromises, showing how trust—whether in a job offer or a monitoring script—is being weaponized. These events underscore the critical need for rigorous zero-trust architectures and vendor risk management across all digital assets.

1. Polymarket traders lost millions after a supply chain attack via DebugBear injected malicious JavaScript to exploit active user sessions.
2. Binance revealed that North Korean hackers used a fake job interview to trick an employee into installing malware, leading to a $6.3 billion heist.
3. The FBI has identified 628 crypto wallets linked to North Korea's TraderTraitor group following the massive Binance breach.
4. German authorities dismantled a "crime-as-a-service" operation that provided fraudulent trading platforms to investment scammers.
5. Five suspects involved in the 2022 TEFAF fine art robbery in the Netherlands have been added to the EU Most Wanted list.
6. WorkOS reported a data breach where an attacker used ARTEX AI to access internal sales application records and customer summaries.
7. CISA added a WordPress Core race condition vulnerability (CVE-2026-119977) to its Known Exploited Vulnerabilities catalog.
8. An aerospace and defense firm, ILC, paid $13 million to settle government allegations that it failed to meet cybersecurity contract requirements.
9. A critical flaw in Canonical's LXD and MicroCloud allows attackers to impersonate trusted clients without needing a private key.
10. Ballistic Ventures is seeking $490 million in new funding to capitalize on the growth of AI-driven cybersecurity tools.
11. AWS identified a remote code execution vulnerability (CVE-2026-119084) in Amazon Redshift JDBC Driver versions prior to 2.3.0.
12. The Florida Department of Education disclosed a breach affecting 4.9 million financial aid applicants, exposing Social Security numbers and personal data.
13. North Korea has officially denied the FBI's attribution regarding the $6.3 billion Binance cryptocurrency hack.
14. Hackers stole roughly $2.7 million from Polymarket users by replacing a page-speed script from a third-party provider.
15. A SANS Internet Storm Center report provides technical guidance on extracting embedded files from OneNote (.one) files.
16. Banks are advised to review security after Abrigo's Sageworks detected suspicious activity and took certain borrower tools offline.
17. Kaspersky discovered NetamLoader, a sophisticated malware targeting custom Windows 10 builds used by government entities in Asia.
18. The South Korean presidential office is investigating the leak of personal data belonging to the president and his overseas trip entourage.
19. A phishing attack on AI healthcare company Xsolis affected nine health systems and exposed the data of 1.4 million patients.
20. Japanese companies are increasingly purchasing cyber insurance following a series of high-profile data breaches in the region.
21. Binance confirmed that North Korean actors compromised its wallet infrastructure via a malware-laden fake recruitment process.
22. Transportation giant CSX experienced a data breach that exposed the Social Security numbers and personal details of tens of thousands of employees.
23. The FBI attributed the record-breaking $6.43 billion Binance theft to the North Korean-aligned hacking group TraderTraitor.
24. Cyberattacks targeted emergency alert apps in Russia and Ukraine, resulting in false warnings, including a nuclear threat alert in Ukraine.
25. Google took down the X.CPE botnet, which primarily infected Android TV set-top boxes and other IoT devices.

Summaries written with AI from the linked source articles.

Sources in this roundup

Most-mentioned keywords

Sources

1. Polymarket Traders Lose More Than $2 Million in Supply Chain Attack Involving DebugBear
2. North Korean fake job interview led to $6.3B Binance heist
3. FBI Links 628 Crypto Wallet Addresses to North Korea’s Binance Hack
4. Germany Busts 'Crime-as-a-Service' Investment Fraud Outfit
5. Five TEFAF robbery suspects added to EU Most Wanted
6. WorkOS says attacker used ARTEX AI to breach internal sales app
7. CISA Adds One Known Exploited Vulnerability to Catalog
8. Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
9. CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
10. Ted Schlein’s Ballistic Ventures seeks $490M for new funds amid AI-driven cybersecurity boom
11. CVE-2026-119084 – Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
12. Florida Reports Major Data Breach Affecting 4.9 Million Financial Aid Applicants
13. North Korea Rejects FBI Attribution of $6.3 Billion Binance Hack
14. Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script
15. OneNote File Extraction, (Sun, Nov 1st)
16. Abrigo’s Sageworks Shutdown: What Banks Should Check After Recovery
17. NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection
18. KR: Presidential office holds emergency meeting over leak of personal data of president, trip entourage
19. Nine health systems affected by AI company data breach
20. JPN: More companies seeking cyber insurance following high-profile data breaches
21. Binance says fake job interview led to $6.3 billion crypto heist
22. CSX data breach exposes employee information
23. FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist
24. Ukraine and Russia both report fake emergency alerts after cyberattacks target apps as limited ceasefire ends
25. Google dismantles massive botnet hidden in Android TV boxes