Rekorddiebstahl bei Binance: Falsches Bewerbungsgespräch als Einfallstor (2026-11-04 06:57 UTC)
Kurz: Der milliardenschwere Diebstahl bei Binance wurde nicht nur durch einen kompromittierten Laptop ermöglicht. Die Verantwortlichen haben Monate daran gearbeitet.
WorkOS says attacker used ARTEX AI to breach internal sales app (2026-11-03 21:28 UTC)
Kurz: Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. […]
Binance says fake job interview led to $6.3 billion crypto heist (2026-11-03 20:05 UTC)
Kurz: Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company’s wallet infrastructure and steal about $6.34 billion in digita…
Kurz: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The high-severity vulnerability, trac…
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity (2026-11-03 18:46 UTC)
Kurz: Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys. The warning cam…
Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes (2026-11-03 18:16 UTC)
Kurz: Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure. The incident is assessed to be part of a large-…
Kurz: Server-side request forgery in the Jira ticketing filter lookup in Devolutions Server 2026.2.22.0 and earlier allows an authenticated low-privileged user to obtain the stored Jira service account credentials via an attac…
Kurz: Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. Successful expl…
Kurz: A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operatio…
Kurz: A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating …
Kurz: A sensitive information disclosure vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated attacker to obtain sensitive information.
Kurz: A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user to cause a denial of service. Successful exploitation could allow an attacker to interrupt the norm…