Hackers steal $6.3 billion from Binance in record crypto heist

Binance was ordered to wind down its EU operations in July after it failed to secure a license under the bloc’s new regulatory framework. The exchange, which became regulated in Abu Dhabi in December 2025, had already agreed to block UK customers from signing up for the exchange after being barred by Britain’s financial watchdog in 2021.

In the US, Binance operates under a separate entity from the rest of its global operations that is registered with the Financial Crimes Enforcement Network and authorized to operate as a money transmitter in 32 states.

Last month, nearly $390 million was stolen from crypto exchange Bitget, which reimbursed customers from its so-called User Protection Fund.

North Korean hackers stole about $2 billion in cryptocurrency in 2025, a 50 percent increase from the year before, according to data from Chainalysis.

Binance said it found no evidence that unique user codes, known as “private keys,” had been breached.

In a post on X early on Friday, Yi He said the exchange expected to allow withdrawals again “in the next 48 hours.”

Binance, which has no official headquarters, last year became regulated in Abu Dhabi, where Zhao and He, who are romantic partners, are based.

In a sign of the potential repercussions from the heist, Paolo Ardoino, chief executive of Tether, said his company had frozen about $1.5 billion of USDT, its $180 billion dollar-linked stablecoin.

Jeremy Allaire, head of Circle, the second-biggest stablecoin issuer, said $800 million of its USDC coin had been frozen amid “reports of a potential exploit” at Binance.

Crypto companies can freeze the wallets in which stolen funds are moved or held. Analytics firm Elliptic said it had verified $2.8 billion of frozen crypto—mostly USDT and USDC—but that the hackers had moved the remainder into assets that could not be frozen, such as the ETH crypto token.

“This is almost certainly the largest theft of any kind in history,” Elliptic said.

Additional reporting by Daniel Tudor in Seoul

© 2026 The Financial Times Ltd. All rights reserved. Not to be redistributed, copied, or modified in any way.

https://arstechnica.com/security/2026/10/hackers-steal-6-3-billion-from-binance-in-record-crypto-heist/




Bulletproof Host Virtualine Loses Its Domain to FBI Seizure

It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments.

The post Bulletproof Host Virtualine Loses Its Domain to FBI Seizure appeared first on SecurityWeek.

https://www.securityweek.com/bulletproof-host-virtualine-loses-its-domain-to-fbi-seizure/




Fresh WordPress Vulnerability in Attackers’ Crosshairs

Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.

The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.

https://www.securityweek.com/fresh-wordpress-vulnerability-in-attackers-crosshairs/




Drupal Commerce Core Vulnerability Exploited Against Online Stores 

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

The post Drupal Commerce Core Vulnerability Exploited Against Online Stores  appeared first on SecurityWeek.

https://www.securityweek.com/drupal-commerce-core-vulnerability-exploited-against-online-stores/




$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek.

https://www.securityweek.com/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack/




Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek.

https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/




TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines

An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.

The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek.

https://www.securityweek.com/teamviewer-flaw-could-let-malicious-hosts-take-over-support-technicians-machines/




PHP2Shell, gli attacchi precedono la patch: cosa cambia per i difensori


Il caso analizzato da Sekoia mostra perché aggiornare i sistemi deve accompagnarsi alla ricerca di compromissioni precedenti. Tra dipendenze nascoste e ricerca delle vulnerabilità accelerata dall’AI, i team di sicurezza devono prepararsi a intervenire anche prima che esista una correzione.

Il rilascio burrascoso delle informazioni sulle vulnerabilità PHP2Shell ha concentrato l’attenzione di tutti sulla delicatezza della fase che precede un annuncio importante, ma non bisogna trascurare le buone pratiche anche dopo che la patch è stata rilasciata. Un’analisi di David Greenwood per Sekoia mostra che il primo tentativo di sfruttamento di PHP2Shell rilevato da Amazon risale al 17 ottobre, quattro giorni prima del rilascio delle patch e questo ci ricorda che la verifica delle attività sospette deve coprire anche il periodo precedente.

Ricordiamo che PHP2Shell comprende due vulnerabilità del motore PHP, CVE-2026-109618 e CVE-2026-109619, che possono consentire l’esecuzione di codice da remoto senza autenticazione. La prima riguarda la gestione dell’esaurimento della memoria, la seconda uno stato interno che può sopravvivere alla liberazione della memoria cui fa riferimento. In determinate configurazioni l’attacco può avvenire prima dell’esecuzione del codice applicativo. Le correzioni sono state pubblicate il 21 ottobre nelle versioni PHP 8.5.12, 8.4.27, 8.3.36 e 8.2.35.

Gli attacchi rilevati hanno colpito degli honeypot

Nel suo report, Amazon ha documentato tentativi contro i propri honeypot precisando che non era chiaro se quei payload avrebbero avuto successo su sistemi reali, ma non è questo il punto.  Secondo Sekoia, lo sfruttamento prima della divulgazione è destinato a diventare sempre più frequente per il software esposto su Internet. Apparati perimetrali, piattaforme di trasferimento file e runtime web offrono agli attaccanti un incentivo evidente: una sola falla può aprire l’accesso a un numero elevato di installazioni. La disponibilità della patch, quindi, non può più essere considerata il punto di partenza dell’esposizione al rischio.

Un secondo problema riguarda le dipendenze. La prossima emergenza, che in realtà sarebbe la riproposizione di qualcosa di già visto in passato, potrebbe nascere in una libreria incorporata in prodotti che l’organizzazione non sa nemmeno di usare indirettamente. Sapere quali applicazioni sono installate diventa insufficiente se manca il collegamento con i componenti che includono. Inoltre, aggiornamenti distribuiti senza un avviso di sicurezza possono rendere meno immediata l’identificazione del rischio attraverso gli scanner.

L’intelligenza artificiale può amplificare questa dinamica.

Nell’interpretazione di Sekoia, la pubblicazione di una classe di vulnerabilità offre ai ricercatori e agli attaccanti un modello da cercare in altro codice. Una scoperta importante potrebbe così generare una famiglia di problemi correlati, distribuiti fra prodotti e runtime differenti. Anche il vantaggio oggi disponibile ai team con accesso ai modelli più avanzati potrebbe ridursi con il miglioramento dei modelli aperti. A questo si aggiunge la fragilità degli embarghi: una dimostrazione pubblicata in anticipo o una correzione distribuita prima del previsto possono anticipare la circolazione delle informazioni.

Cosa devono fare i difensori?

Per i difensori, la prima conseguenza pratica è affiancare alla correzione un’indagine retrospettiva. Nel caso di PHP2Shell, la ricerca deve partire almeno dal 17 ottobre, anziché limitarsi ai giorni successivi alla pubblicazione delle patch. Applicarla elimina la vulnerabilità, ma non rimuove eventuali accessi o meccanismi di persistenza già introdotti.

La seconda priorità è migliorare l’inventario, collegando applicazioni, runtime e librerie incorporate. Sul piano operativo, questo significa poter rispondere rapidamente a una domanda concreta: quali servizi dipendono dal componente appena segnalato, chi li gestisce e quali sono raggiungibili dall’esterno?

Sekoia, inollre, raccomanda di proteggere le interfacce di amministrazione con controlli di accesso e di rimuovere dalla rete pubblica i servizi che non devono essere raggiungibili. In pratica, sottolinea l’importanza di regole che dovrebbero essere già la norma nella maggior parte delle aziende, ma spesso si perdono di vista.

Occorre poi decidere in anticipo come agire quando la patch non esiste. Disabilitare un modulo, applicare una regola al web application firewall o sospendere un servizio sono opzioni da valutare prima dell’emergenza, individuando anche chi può autorizzarle fuori dall’orario di lavoro. Per PHP2Shell, le mitigazioni di configurazione non sostituiscono l’aggiornamento completo.

Infine, la rilevazione deve seguire ciò che accade dopo lo sfruttamento: un processo web che avvia una shell, file inattesi nella directory del sito o connessioni in uscita insolite. Sono segnali da correlare e indagare, anche prima che la vulnerabilità riceva un nome. Per le falle già sfruttate sui sistemi esposti, anche i tempi di aggiornamento devono riflettere l’urgenza: la capacità di intervenire rapidamente deve andare insieme a quella di capire se qualcuno è già entrato.

Condividi l’articolo



Articoli correlati

Altro in questa categoria


https://www.securityinfo.it/2026/10/28/php2shell-gli-attacchi-precedono-la-patch-cosa-cambia-per-i-difensori/?utm_source=rss&utm_medium=rss&utm_campaign=php2shell-gli-attacchi-precedono-la-patch-cosa-cambia-per-i-difensori




Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics

A major hospital network in New Mexico raced to fix a cybersecurity issue on Monday that forced it to send ambulances to other hospitals and left the state without an emergency department capable of treating the most serious injuries.

The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at its more than 30 clinics. It said it was working to resolve the issue, the extent and nature of which was not immediately clear.

The hospital network conducts about 900,000 outpatient visits and receives 100,000 emergency room visits each year, according to its website. It operates the state’s only Level 1 trauma center.

Presbyterian Healthcare Services and Lovelace Health System, two other major healthcare providers in New Mexico, said they were coordinating with the UNM Health System, including taking additional patients.

The UNM Health System said in a statement that its hospitals and clinics began resuming operations in phases later in the day.

Multiple UNM Health System employees said they heard messages across their computers while working late Monday morning that claimed to have stolen student and employee data and patient information.

Advertisement. Scroll to continue reading.

A spokesperson for the health system wouldn’t comment, saying that the incident remains an active law enforcement investigation. FBI spokesperson Margot Cravens in Albuquerque said the agency was “assisting our partner” but declined further comment.

The Associated Press left emails and phone messages seeking comment from the Bernalillo County Sheriff’s Office and the Albuquerque Police Department.

The incident comes amid growing concern about the security of digital systems that underpin essential services, from banking to medical care.

Incidents affecting hospitals, including demands for ransom. have been going on for a decade, said Josephine Wolff, a professor of cybersecurity policy at Tufts University.

Breaching a system to play a message on computers is pretty unusual, Wolff said. Monday’s incident, she said, shows “how much work we still have to do to get better at defending ourselves.”

On Monday afternoon, at the main entrance to its Albuquerque hospital, employees in turquoise staff shirts sat on chairs that blocked the waiting room and told patients their appointments might be canceled.

At a medical center in the Albuquerque suburb of Rio Rancho, two security guards at the entrance told patients arriving for appointments to reschedule.

UNM’s Health Sciences Center, the state’s largest academic medical center, canceled classes Monday.

Related: Cyberattacks on Hospitals Are Likely to Increase, Putting Lives at Risk, Experts Warn

https://www.securityweek.com/cybersecurity-issue-forces-a-major-new-mexico-hospital-to-divert-patients-and-close-clinics/




Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI

Artificial intelligence giant Anthropic filed papers Monday for what could be the biggest initial public offering of stock ever even as its top executive warns that advanced AI could pose an existential threat to humanity.

The filing sets up the San Francisco company for a Wall Street debut next month, potentially eclipsing the SpaceX initial public offering in June that raised a record $86 billion. An Anthropic IPO would also put the company ahead of OpenAI in going public in what is expected to be a pair of blockbuster stock debuts for the rival AI labs.

An IPO could provide Anthropic with enormous resources to accelerate its expansion. The amount the company ultimately raises remains uncertain, as do its final valuation and offering price, but even at lower estimates, it would turn the five-year-old startup into one of the world’s most valuable companies and potentially boost the wealth of CEO Dario Amodei and his sister and co-founder, Daniela, by billions of dollars.

The 335-page document showed Anthropic’s revenue is growing rapidly, reaching more than $16 billion in the first half of the year — 14 times its revenue from the same period last year. But like many other tech companies going public, the company behind the Claude chatbot has yet to turn a profit.

Despite the losses, Anthropic, valued earlier this year at $965 billion by private investors, is reportedly set to see that value rise to $1.5 trillion or possibly $2 trillion, although its final valuation has not been established. At $1.5 trillion, Anthropic would rank among the world’s most valuable public companies, alongside Tesla.

As for money raised, the offering could bring in as much as $100 billion, according to reports, surpassing the record set by SpaceX.

Advertisement. Scroll to continue reading.

In a regulatory filing, Anthropic said it will list its stock on the Nasdaq Global Select Market under the ticker symbol “ANT.”

A Wall Street debut is planned in a jittery market

In the filing, the company said it could use some of that money on acquiring other businesses and technology as well as investing in infrastructure to grow its business to take on rivals.

Formed in 2021 by former OpenAI leaders, Anthropic is locked in a fight for dominance with that company. The two leaders, Amodei and OpenAI CEO Sam Altman, are widely seen as bitter rivals.

But they have plenty of other competitors, including Google, newer startups in the U.S. and China and SpaceX, which has an AI business. Anthropic, OpenAI and SpaceX’s AI division have all been losing more money than they make because of the huge costs of resources in building AI, fueling concerns of a bubble.

The need for cash may explain why Anthropic is rushing to tap public markets this year, and not waiting until next year, as is OpenAI’s plan. Adding to the pressure is the possibility demand for AI shares could drop, or even collapse. Investors have become jittery about the massive financing needs of the sector, and several tech companies have pulled IPO plans recently.

In addition to helping plug any cash shortfall, the IPO will shower extraordinary wealth on Anthropic’s seven founders, including Amodei and his sister. The filing didn’t directly state their ownership stakes, but other figures disclosed suggest each will end up with 1.4% of the company, a windfall of as much as $28 billion a person should the company go public at the top expected value.

Risks aplenty, but a big payoff to the founders

Dario, 43, and 39-year-old Daniela, who is Anthropic’s president, are worth $15.5 billion each, according to Forbes, which ranks them as the 176th and 177th richest in the world.

Anthropic reported a net loss of $80.7 billion in the first half of 2026, although that included a one-time, $72.4 billion charge for an accounting adjustment related to financing agreements, according to the filing. In the same period a year ago, Anthropic lost $13 billion.

Reflecting AI’s dangers, the document includes some unusual provisions, including granting those two and their five other co-founders 50.1% of shareholder votes through a special class of shares. Anthropic also has appointed independent, financially disinterested members of a so-called Long-Term Benefit Trust, holding power to appoint directors, that is designed to ensure the company doesn’t put financial interests ahead of public safety.

Another unusual feature of the filing is its long list of “risk factors,” a required disclosure for every public company but in this case one that runs nearly 100 pages — and makes for riveting reading.

Among the risks are the quotidian — the possibility it won’t be able to retain key staff or navigate regulatory roadblocks — and the horrific. The latter includes the prospect of “malicious actors” using AI models to build chemical weapons, authoritarian rulers turning to the technology to crack down on their citizens and the possibility that its AI models could go rogue and “pose catastrophic or existential risks to humanity.”

Calls for an AI slowdown

Anthropic and other leading companies have touted the technology’s potential to cure diseases and speed economic growth. But it also threatens major disruptions to jobs by reducing the need for human labor.

A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.

In September, Amodei said the AI industry should slow its fast-moving development to give safety measures time to catch up. Without such a slowdown, Amodei warned AI could be capable of letting loose a swarm of agents that could take over the entire internet within six to 12 months.

He offered a plan in a post on his website to increase checks on the industry, noting that Anthropic is already undertaking part of this on its own. As for other steps, though, he said that would require coordination across the industry and with governments around the world, including authoritarian ones.

Clashes with the U.S. government

Anthropic has tried to set itself apart from other AI companies as the “good guys,” focusing on safety and responsible development as opposed to growing at all costs. Some of this sentiment stems from the company’s dispute with the U.S. government, which broke out in February when President Donald Trump and Defense Secretary Pete Hegseth accused Anthropic of endangering national security and designated the company a supply chain risk.

Anthropic sued the Pentagon over the supply chain risk designation in March for what it called an “unlawful campaign of retaliation” over its refusal to allow unrestricted military use of its technology. The legal challenge intensified an unusually public dispute over how AI can be used in warfare and mass surveillance.

ChatGPT maker OpenAI made its own deal to work with the Pentagon hours after the government punished Anthropic for its stance. Anthropic also filed a separate and narrower case involving a different rule the Pentagon is using to try to declare Anthropic a supply chain risk.

A California judge ruled in Anthropic’s favor in the first case and a Washington, D.C. judge sided with the government in the second. Both sides are appealing the decisions.

https://www.securityweek.com/anthropic-files-for-potentially-the-biggest-ipo-ever-as-ceo-warns-of-risk-to-humanity-from-ai/