SecurityWeek (1 hour ago)
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.
Read the full story on SecurityWeek.
Lazarus is breaking its own records year after year but Binance says user funds are SAFU.
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.
The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything. Their concerns are practical. An IPS protection could block legitimate traffic.
Binance has disclosed that $6.3 billion worth of crypto funds have been stolen from the platform, in what’s believed to be the biggest cryptocurrency hack on record.
Multiple crypto-tracing firms say notorious North Korean hackers TraderTraitor may be behind the largest digital heist in history—with billions of crypto likely gone for good.
Ahmad Umar Agha, a Syrian Electronic Army hacker known online as “Th3Pr0,” has been sentenced by a U.S. federal court to 42 months in prison for his role in a hacking conspiracy that targeted Western news outlets.
Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.
Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.
71 active sources
26 Turkish · 45 English
All sources
