WEEKLY TOP TEN: November 02, 2026, 16:00 GMT
- Binance Hit by Record $6.3 Billion Crypto Theft
Binance said about $6.3 billion in assets were moved out of its wallets on Thursday, a theft that blockchain analysts TRM Labs and Chainalysis attribute to North Korea’s TraderTraitor unit. TRM reconstructed the attack as roughly $6.36 billion drained across ten blockchains, most of it within 20 minutes. Binance’s early findings point to a compromised DevOps engineer’s laptop that gave the attacker access to a service container used to submit unauthorized withdrawals, though it later found additional breach points. About $3 billion has been frozen. Withdrawals are paused, and Binance says it will cover all losses. - Max-Severity GitLab Flaw Now Exploited in the Wild
CISA added CVE-2026-97229 to its Known Exploited Vulnerabilities catalog after attackers targeted Alpine Linux’s own GitLab server with an exploit on October 20 and 21. The maximum-severity flaw lets unauthenticated attackers execute code through a crafted regular expression in a CI/CD configuration. Alpine says the attack failed, its package repository and October 21 releases were not tampered with, and it rebuilt the instance from scratch. The bug sits in Ruby, so self-managed GitLab installs using their own Ruby also need Ruby 3.3.13, 3.4.12, 4.0.9 or later. GitLab shipped its fix on October 12, and federal agencies had three days to patch. - WordPress Core Update Flaw Exploited Within Hours
Attackers began exploiting a newly patched WordPress vulnerability within hours of WordPress 7.1.4 shipping on October 28, according to Defiant, the security company behind the Wordfence firewall. The high-severity flaw is an unauthenticated race condition in the WordPress Core update process that can lead to remote code execution. Because the exploitable window lasts only seconds, attackers repeatedly poll the vulnerable paths to catch it. Wordfence telemetry recorded the first match for its new firewall rule just nine minutes after deployment. Administrators who have not yet upgraded to 7.1.4 should do so immediately and review logs for polling activity. - Drupal Commerce Core Access Bypass Under Attack
Drupal warned that a highly critical access bypass in the Commerce Core module, tracked as CVE-2026-118539, is being exploited against online stores. The Drupal security team scored it 21 out of 25, and unauthenticated attackers can exploit it regardless of module configuration. Drupal statistics show the module runs on more than 42,000 sites. Fixed releases are 3.3.13 and 8.x-2.41, and the advisory urges store owners to audit their orders for inconsistencies. Drupal has not said how the bug is abused, who is behind the attacks, or whether it was exploited before the October 28 patch. Drupal issued 38 other advisories the same day. - Malicious Claude Code Extension Hits Cursor Users
A maliciously modified version of Anthropic’s Claude Code extension was available in Cursor’s extension marketplace for about 11 hours on October 29, exposing as many as 5,000 developers. The extension tries to install a persistent SSH backdoor, and even when that fails it sends reconnaissance data to the attacker, including usernames, hostnames, public IP addresses, Git email addresses and names of environment variables tied to credentials. Cursor says Anthropic did not develop the malicious build, and the company has not explained how attackers published it under Anthropic’s name. Developers who installed the extension that day should treat their machines and SSH keys as compromised. - Cisco Firewall Zero-Day Exploited to Crash VPNs
Cisco released fixes for CVE-2026-76418, an actively exploited flaw in the Remote Access SSL VPN service of Secure Firewall ASA and Secure Firewall Threat Defense software. Rated 8.6, it lets unauthenticated remote attackers force affected firewalls to reload, disrupting VPN availability. Devices are exposed when SSL VPN is enabled and secondary authentication is configured on a tunnel group, and Cisco says dropping secondary authentication weakens security, so it recommends upgrading instead. Cisco’s PSIRT learned of exploitation during October. This is the second ASA and FTD denial-of-service zero-day exploited since August, and CISA added the flaw to its catalog with a November 1 federal deadline. - Northflank Breach Leads to Abuse of AI API Keys
Cloud hosting platform Northflank told customers to rotate all credentials and secrets after a security breach led to unauthorized use of customers’ AI API keys. The company disclosed the incident on October 30 after cloud security firm Wiz alerted it at 11:43 UTC, urging customers to disable and rotate every key. Northflank has not answered questions about whether stored credentials were stolen. Wiz counts at least nine incidents in October affecting AI developer platforms, including Railway, OpenCode, Warp and Lightning AI, in a report it calls Black October. Stored AI keys are proving to be lucrative targets because they unlock expensive services. - Chainalysis Confirms Intrusion by Agentic Attacker
Blockchain analytics firm Chainalysis told customers that an external actor using what it called offensive agentic techniques gained unauthorized access to its systems and internal tools this month. The company said the attacker reached non-sensitive customer data, including user IDs, full names, email addresses and organization role labels for users provisioned on its platform. Chainalysis says its teams are investigating, patching vulnerabilities and hardening systems, and it will send organization-specific updates. It has not disclosed how many customers are affected or how the attacker got in. The firm helped attribute Binance’s $6.3 billion theft to North Korea, and the exposed names and roles could support targeted phishing. - Warp Discloses Breach of AI Agent Logs
Warp, the agentic development environment, disclosed that attackers compromised a third-party vendor in its infrastructure and reached AI agent decision logs and user telemetry. Chief executive Zach Lloyd estimated that roughly one percent of users may be affected, while Warp’s website claims at least 800,000 users. The company has not named the vendor or the vulnerability and has not said whether the exposed traces contained user prompts. Agent logs can record commands, tool calls and output. The incident follows a breach at AI coding platform OpenCode, which warned users the previous week that stored API keys for external providers were exposed. - Gheist Campaign Abuses Stolen GitHub Tokens
Wiz researchers say an ongoing campaign called Gheist uses stolen GitHub tokens to plant workflows that dump repository secrets into Actions logs. Tracked since September 15, it has touched more than 850 compromised accounts and over 13,500 malicious branches named with a ci-sync prefix. Attackers encode secrets so GitHub’s log masking misses them, download the logs through the API and delete the runs. A GitHub control added July 28 stopped every public-repository run Wiz examined, but it does not cover private repositories or GitHub Enterprise Server. In some enterprises, attackers cloned private repositories and hours later used cloud credentials to enumerate AWS Secrets Manager.
Our Threat Operations and Intelligence team compiles a daily digest of the most recent online cybersecurity risks. The previous 10 stories were determined to be most significant during the course of the week, ranked by highest risk, and using multiple sources when available.