Trigger.dev Says Attacker Accessed Customer Environment Variables
Trigger.dev says an attacker accessed environment variables for some customer organizations. The exploit has been blocked, but the scope remains undisclosed.
Binance Hack Began With Fake Job Interview, Exchange Says
Binance says attackers used a fake recruitment process, tampered developer tools and employee computers before stealing about $6.3 billion on October 29.
Harvard Breach Exposes 851,000 Email Addresses
Have I Been Pwned has added 851,000 email addresses from Harvard's 2025 alumni and fundraising breach, revealing the scale of the exposed data.
Europol Seizes 100 Servers in Investment Scam Crackdown
An international operation backed by Europol and Eurojust seized more than 100 servers and arrested seven suspects over fake investment platforms.
NVIDIA Brev Incident May Have Exposed Customer SSH Keys
NVIDIA says unauthorized activity on Brev may have exposed SSH keys provisioned for customer virtual machines. The company rotated affected keys.
Android November Patch Fixes Critical RCE, 23 Critical Flaws
Google’s November Android bulletin fixes a critical Framework remote-code-execution flaw and lists 23 critical vulnerabilities across two patch levels.
Revolve Breach Notices Reach at Least 197,072 People
Revolve says an attacker may have obtained names, contact details and saved payment-card data. At least 197,072 people received breach notices.
Claude Cowork Adds Beta EDR Monitoring Inside Local VM
Anthropic’s beta lets enterprise security teams run approved EDR sensors inside Claude Cowork’s local virtual machine, bringing agent activity into managed endpoint monitoring.
PapRAT Malware Targets South Asian Organizations in BITTER Campaign
FortiGuard Labs says the suspected South Asian group BITTER used three Windows infection chains to deploy PapRAT and maintain access to targeted organizations.
North Korea Denies $6.3 Billion Binance Hack Allegations
North Korea has denied responsibility for the $6.3 billion Binance cryptocurrency hack, dismissing FBI allegations as politically motivated.
WorkOS Breach Exposes Customer Slack Conversation Excerpts
WorkOS says an attacker accessed an internal sales app and exposed customer contacts and excerpts from sales calls, support discussions and Slack conversations.
Siemens IoT2050 Flaw Targeted to Drop Linux Bot
VulnCheck detected attempts to exploit a CVSS 10.0 Node-RED flaw in Siemens SIMATIC IoT2050 devices to deploy a Linux bot.
CryptoPayment Gateway Flaw Sees Exploitation Attempts
Defused Cyber reports exploitation attempts against CVE-2026-81648, a critical WordPress plugin flaw that can expose wallet credentials and allow file deletion.
Loading
