Security news.
Critical enterprise infrastructure is under heavy pressure today, led by active zero-day exploitation against Ivanti Connect Secure gateways and widespread remote code execution threats facing unpatched GitLab instances. Meanwhile, the FBI has linked North Korea to the historic $6.3 billion Binance compromise as law enforcement and tech giants coordinate major botnet takedowns. Security teams must also contend with emerging developer supply chain risks, including backdoor threats targeting AI workflows and IDEs.
Ivanti Patches Two Zero-Days Added to CISA KEV
Ivanti released fixes for two Connect Secure vulnerabilities (CVE-2026-111357 and CVE-2026-118527) actively chained in zero-day attacks and added to CISA's catalog.
FBI Blames North Korea for $6.3 Billion Binance Cyberattack
Federal authorities formally attributed the massive cryptocurrency heist to North Korean state-sponsored threat group TraderTraitor and flagged over 600 associated laundering addresses.
Over 1,000 GitLab Servers Vulnerable to Ongoing RCE Exploitation
More than 1,000 internet-facing GitLab instances remain exposed to active remote code execution attacks targeting a maximum-severity flaw.
Google Dismantles 1.3M-Device XCPE Android Botnet
A massive botnet spanning 1.3 million streaming TV boxes was disrupted after hardware vendor Videostrong allegedly pre-installed backdoors and sold proxy access to cybercriminals.
Backdoored Claude Code Extension Found in Cursor Marketplace
Attackers leveraged a trojanized developer extension for the Cursor IDE to conduct host reconnaissance and open persistent reverse SSH tunnels.
Critical Langflow Flaws Enable Pre-Auth RCE on AI Servers
Critical vulnerabilities in the open-source Langflow orchestration framework allow unauthenticated remote attackers to bypass security checks and execute arbitrary code.
Synology Urges NAS Patching Amid C3RB3R Ransomware Influx
Synology issued an urgent advisory warning users to update their network-attached storage appliances immediately to prevent compromises by escalating C3RB3R ransomware campaigns.
Florida Student Aid Breach Exposes 4.9 Million Records
A cyberattack targeting the Florida Department of Education's financial aid web platform potentially leaked Social Security numbers and sensitive personal data for millions.