The last 30 days of cyber threats for education and government (361 items).
AI-assisted summaries and fixes, sources cited.
Medium · Security Affairs ·
Unidentified intruders took control of civil emergency notification apps and pushed invented warnings to residents in both countries late Sunday, raising panic and trust-erosion worries.
Informational · Help Net Security ·
The FBI says North Korean actors and scammers stole more than $6.3 billion in virtual assets, prompting a late-2026 alert aimed at Binance account holders.
High · SecurityWeek ·
An unknown attacker altered DNS entries tied to Polymarket, affecting one customer, while roughly $3.9 million in trader money was returned after the compromise.
High · SecurityWeek ·
The FBI has attributed a large cryptocurrency theft and laundering operation to North Korea’s TraderTraitor and flagged 600 addresses tied to about $6 billion in stolen funds.
Informational · Security Affairs ·
Chainalysis says an outside party reached internal tools this month and took customer names, emails, and user IDs, while passwords and investigation records remained protected.
Informational · Help Net Security ·
DeepSeek has shared an experimental Super-Agent codebase that observes team conversations and issues repository-related requests, prompting review before any K-12 trial.
Informational · Help Net Security ·
Vinay Thakker of KloudStax warns that AI coding assistants need scoped identities and proxy-enforced limits to curb data exfiltration and secret misuse.
High · The Record ·
U.S. agencies allege that North Korean TraderTraitor actors stole funds from a crypto platform and are urging the industry to block related transactions.
High · BleepingComputer ·
The FBI has tied a record cryptocurrency theft involving Binance to North Korea’s TraderTraitor crew, with reported losses of $6.3 billion.
High · Security Affairs ·
The FBI on October 29, 2026, blamed North Korea for a $6 billion theft from Binance and urged organizations to halt related transactions.
Informational · Security Affairs ·
A Security Affairs newsletter compilation examines how artificial intelligence is changing cybersecurity, with no CVE or specific vulnerability attached.
Informational · Security Affairs ·
Security Affairs' September 2022 roundup covers Android spyware aimed at WeChat and Telegram, a Mac backdoor, and Magento CMS infections across 953 online stores.
High · BleepingComputer ·
Alpine Linux rebuilt its GitLab server and reset credentials after hackers tried to execute remote code against development infrastructure on Oct. 20–21, with no CVE cited.
Informational · BleepingComputer ·
OpenAI has raised usage ceilings across ChatGPT, ChatGPT Work, and Codex while linking features more closely, with no security vulnerability reported.
High · Security Affairs ·
Security Affairs' weekly bulletin reports that attackers are actively exploiting known vulnerabilities in Ivanti Connect Secure and Drupal Commerce, with CISA adding both to its exploited-vulnerability catalog.
High · Security Affairs ·
Attackers can use concealed text messages to crash Android phone service, disrupting calls and potentially blocking emergency dialing, with no CVE assigned.
Informational · SecurityWeek ·
Northstar Security has emerged from stealth with $7 million and a focus on mapping how combinations of risks affect AI agents.
High · Hackread ·
Federal investigators have connected hundreds of digital-wallet addresses to a North Korean state-linked group and a multibillion-dollar theft, prompting requests to block transfers.
Medium · Help Net Security ·
Binance disclosed a $6.3 billion digital-asset theft, while r/opensource moderators announced a ban on open-source AI projects; Help Net Security covered both.
Medium · The Hacker News ·
An attacker who can reach the HTTPS API and obtain a public certificate may authenticate as a trusted client, gaining cluster and VM access in Canonical LXD and MicroCloud.
High · The Hacker News ·
Attackers tampered with a page-speed script tied to Polymarket and DebugBear, closing out user positions and draining funds from hundreds of wallets before refunds were issued.
Medium · The Hacker News ·
Three U.S. federal agencies have publicly attributed a multi-billion-dollar theft of virtual assets from Binance in 2026 to North Korea-backed intrusion clusters tracked under at least six different names.
Informational · Sucuri Blog ·
Sucuri's October 2026 monthly summary highlights WordPress security updates and patch roundup guidance, with no CVEs cited, urging admins to reduce compromise risk.
Informational · BleepingComputer ·
Northflank has warned customers that a security incident exposed credentials, including AI API keys, and that some keys were used without authorization.