Security news from around the web with our take: what happened, what it means for you, and what defenders should do. We link every original story.
3 stories match your filters.
Binance traces the $6.3 billion Oct. 29 theft to a compromised DevOps engineer's laptop. TRM Labs and Chainalysis blame North Korea's TraderTraitor; about $2.7 billion is frozen and Binance says users are covered.
iOS and iPadOS 18.7.11 backport Apple's fix for CVE-2026-86950, a CoreGraphics zero-day Apple says may have been exploited against targeted individuals, to the iPhone XS, XR and older iPads.
PHP shipped 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on Oct. 21 to fix two critical bugs nicknamed php2shell, after details leaked early. Updated Oct. 25: Amazon says both bugs are now broadly exploited.