Security news.
Today's security landscape is dominated by massive supply chain compromises and infrastructure exploits, headlined by a $6.3 billion cryptocurrency heist at Binance stemming from social engineering. Meanwhile, system administrators face urgent patching demands following active attacks on Linux servers, critical vulnerabilities in Barracuda appliances, and a 9.8-rated flaw in the Linux kernel's TCP stack. Cloud security teams are also on alert as LLMjacking schemes inflict millions in unauthorized computing charges.
Binance Loses $6.3 Billion Following Fake Job Interview Malware Attack
North Korean hackers compromised Binance's internal wallet infrastructure and stole over $6.3 billion after tricking an engineer into installing malware via a recruitment-themed lure.
Barracuda Warns of Critical Flaws Allowing Root Device Takeover
Barracuda urged customers to patch CVE-2026-116606 and an accompanying command injection flaw that attackers can chain together to bypass authorization controls and obtain root access.
cPGuard Security Update Mechanism Hijacked to Deploy Linux Backdoors
Threat actors compromised the update channel for OPSSHIELD's cPGuard, pushing malicious scripts to customers' Linux servers to harvest password hashes and plant persistent backdoors.
Critical 9.8-Rated Linux Kernel TCP Vulnerability Disclosed
Red Hat has patched CVE-2026-98432, a remote, unauthenticated use-after-free flaw in the IPv4 TCP stack capable of remote code execution, while Ubuntu releases preliminary test fixes.
Google Warns LLMjacking Attacks Are Driving Multi-Million Dollar Cloud Bills
Attackers are increasingly stealing cloud credentials and API keys to hijack enterprise large language models, running up over $100,000 per day in unauthorized AI computing expenses.
Attackers Exploit BTCPay Server Flaw to Drain Hot Wallets
BTCPay Server issued an emergency update after malicious actors actively exploited a vulnerability in instances running version 2.4.1 or earlier to steal Bitcoin and Litecoin.
mSecure Warns Users After Detecting Suspicious Password Manager Activity
mSeven Software is urging all mSecure password manager users to rotate stored passwords, remove existing passkeys, and reset 2FA configurations following unauthorized access indications.
Google and Partners Disrupt 1.3-Million-Device Android Botnet
A coordinated industry action dismantled the XCPE botnet, an operation involving pre-infected Android TV set-top boxes used for residential proxy networks and massive ad fraud.