Security news from around the web with our take: what happened, what it means for you, and what defenders should do. We link every original story.
12 stories match your filters.
Binance traces the $6.3 billion Oct. 29 theft to a compromised DevOps engineer's laptop. TRM Labs and Chainalysis blame North Korea's TraderTraitor; about $2.7 billion is frozen and Binance says users are covered.
iOS and iPadOS 18.7.11 backport Apple's fix for CVE-2026-86950, a CoreGraphics zero-day Apple says may have been exploited against targeted individuals, to the iPhone XS, XR and older iPads.
DreamHost is forcing email, FTP and SFTP password resets in an ongoing incident and telling owners to remove unknown forwarding rules, but hasn't said what happened.
ENGIE says attackers stole French customers' contact details and contract and meter numbers from a partner marketing platform; no banking data, and its own systems weren't hit.
Sony Network Communications says an Oct. 19 intrusion exposed 2.59 million So-net and Docomo Hikari customer records, plus 54,401 email addresses with passwords. No card data was taken.
Artem Stryzhak, a Ukrainian affiliate who rented Nefilim and Hive ransomware to hit companies, law firms, a dental office and a healthcare provider, was sentenced to 70 months in US prison.
Eye Security found Time4Popcorn's abandoned updater would run any file as SYSTEM or root, registered its domain and used it to switch the updater off. Android users remain exposed.
An Interpol-led operation across 21 countries arrested 1,462 suspects, dismantled 10,909 malicious networks and recovered more than $105 million from BEC, scam and ransomware crews, BleepingComputer reports.
Chrome's Enhanced Protection now checks copied commands for ClickFix scams, uses server-side Gemini to spot scam pages, and adds a softer suspicious-site warning.
PHP shipped 8.5.12, 8.4.27, 8.3.36 and 8.2.35 on Oct. 21 to fix two critical bugs nicknamed php2shell, after details leaked early. Updated Oct. 25: Amazon says both bugs are now broadly exploited.
Rank Math PRO 3.0.123, served from the vendor's own site for about 11 hours on Oct. 15-16, carried a backdoor that creates hidden admins and rebuilds itself. Updating alone doesn't clean it.
Ahold Delhaize, parent of Food Lion, Stop & Shop, Hannaford and Giant, is restoring websites and apps after a cyberattack disclosed Oct. 12. Stores are open and no data theft has been found so far.