CyberPulse Cybersecurity News, with Source Links
FA
CyberInsider

Binance links $6.3 billion security incident to compromised laptop

Binance says a compromised DevOps engineer’s laptop may have enabled an attacker to submit unauthorized withdrawals in a security incident with an estimated impact of $6.3 billion. The cryptocurrency exchange says it has frozen approximately $3 billion in affected assets on-chain and pledged to cover all losses. Withdrawals remain suspended while Binance overhauls its withdrawal … The post Binance links $6.3 billion…

DevOps & Infrastructure
Read the full article at CyberInsider Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Tenable Blog

php2shell one week later: Why one exploit doesn’t work everywhere

php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the exception: one tuned exploit can reach every device that runs it.Key takeawaysThe five vulnerable PHP sites we exposed to the internet were not compromised, and public proofs-of-concept (PoCs…

Vulnerabilities & Zero-Day Cloud Security Threat Intelligence
Source
CyberInsider

‘SMS of Death’ flaw cuts off Android calls without user interaction

A malformed text message can silently crash Android’s telephony service and disconnect calls, including emergency calls. Repeated delivery can leave affected phones unable to maintain cellular service even after restarting. Independent researcher Mark Blaszczyk published the findings on October 29, nearly six months after reporting the issue to Google. His disclosure says Google ultimately classified … The post ‘SMS…

Mobile Development
Source
AWS Security Bulletins

CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

Bulletin ID: 2026-156-AWS Publication Date: 10/29/2026 09:30 AM PDT Description: We are aware of CVE-2026-119115, an incorrect authorization issue in the issuer resolution logic. In affected versions, under certain conditions, an authenticated user whose approval policy only authorizes a namespace-scoped issuer could obtain certificates, including subordinate CA certificates, signed by a cluster-scoped issuer they ar…

Vulnerabilities & Zero-Day Cloud Security Cloud Computing
Source
CyberInsider

Steam flaws enabled zero-click code execution between logged-in PCs

Valve’s Steam platform was susceptible to zero-click remote code execution between computers signed into the same account. The findings were detailed by Atredis Partners researcher Bryan Alexander in an October 28 report, following a partial presentation at BSides PDX 2026. The team released proof-of-concept code and reported all the issues through Valve’s HackerOne program. Atredis … The post Steam flaws enabled zer…

Source