Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 01:28 IST · 13 sources · Get these by email

Threats, ransomware & breaches FBI links $6.3 billion Binance crypto heist to North Korean hackersThe FBI has confirmed that North Korean state-sponsored hackers known as TraderTraitor were behind the $6.3 billion crypto-theft attack on Binance, making it the largest cryptocurrency heist on record. [...] BleepingComputer · Global · 1 Nov 2026
Threats, ransomware & breaches Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear ScriptMalicious code on the website of prediction market Polymarket sold some signed-in traders' positions and moved their funds to the hackers on October 29. The code had replaced a page-speed script that the site loaded from an outside company. Polymarket says it is refunding about $2.7 million to 726… The Hacker News · Global · 1 Nov 2026
Threats, ransomware & breaches FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto HeistThe U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899. The FBI, along with the U.S.… The Hacker News · Global · 1 Nov 2026
Threats, ransomware & breaches NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET InjectionCybersecurity researchers have disclosed details of what has been described as a "highly sophisticated infection chain" targeting government organizations in Asia. The activity, detailed by Kaspersky this week, targeted a custom Windows 10 build used exclusively by government entities in Asia and… The Hacker News · Global · 1 Nov 2026
Threats, ransomware & breaches New Android SMS of Death exploit can remotely crash unpatched phonesA security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt cellular service or crash phones by sending a specially crafted text message. [...] BleepingComputer · Global · 31 Oct 2026
Threats, ransomware & breaches Reddit to lock content behind logins to fight scrapersReddit announced in a post by co-founder Steve Huffman that the site will gradually become a "logged-in service," offering limited access to visitors without accounts. [...] BleepingComputer · Global · 31 Oct 2026
Threats, ransomware & breaches Chainalysis discloses data breach from "offensive agentic techniques"Blockchain analytics firm Chainalysis disclosed a data breach after attackers used "offensive agentic techniques" to access internal systems and tools, exposing customer names, email addresses, user IDs, and organizational roles. [...] BleepingComputer · Global · 31 Oct 2026
Threats, ransomware & breaches Inside a malicious Claude Code-branded extension and its persistent SSH backdoorMicrosoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog. Microsoft Security Blog · Global · 31 Oct 2026
Threats, ransomware & breaches Critical Linux kernel flaw allows remote root attacks on MPTCP serversSecurity researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute commands as root on servers running Multipath TCP (MPTCP) listeners. [...] BleepingComputer · Global · 30 Oct 2026
Threats, ransomware & breaches Fashion retailer Resolve says hackers stole payment card informationThe company, billing itself as “the next-generation fashion retailer for Millennial and Generation Z consumers,” said a recent hack exposed customer payment card numbers. The Record · Global · 30 Oct 2026
Threats, ransomware & breaches Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breachThe state’s Department of Education (FLDOE) said on Thursday it became aware of a data breach involving the Florida Student Financial Aid website on October 19. The Record · Global · 30 Oct 2026
Threats, ransomware & breaches TeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the computer that connects and takes control is the viewer, and the machine it controls is the host. A malicious or compromised host can… The Hacker News · Global · 30 Oct 2026
Threats, ransomware & breaches Malicious Claude Code extension on Cursor planted SSH backdoorsA malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware designed to install persistent SSH backdoors. [...] BleepingComputer · Global · 30 Oct 2026
Threats, ransomware & breaches Undead Software Projects Continue to Raise Security RisksA security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers. Dark Reading · Global · 30 Oct 2026
Threats, ransomware & breaches SS7 and Diameter Attacks: How Signaling Flaws Expose Your PhoneFlaws in SS7 and Diameter signaling protocols can allow attackers to track phone locations, intercept calls and SMS verification codes, and impersonate subscribers without compromising their devices. Cape explains how these attacks exploit trust between networks and how its security-focused mobile… BleepingComputer · Global · 30 Oct 2026
Threats, ransomware & breaches Bulletproof Host Virtualine Loses Its Domain to FBI SeizureIt allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments. The post Bulletproof Host Virtualine Loses Its Domain to FBI Seizure appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Threats, ransomware & breaches CISA says max severity GitLab flaw now exploited in the wildAttackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA). [...] BleepingComputer · Global · 30 Oct 2026
Threats, ransomware & breaches Drupal warns of critical Commerce Core flaw exploited in attacksDrupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...] BleepingComputer · Global · 30 Oct 2026
Threats, ransomware & breaches Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxTracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek. SecurityWeek · Global · 30 Oct 2026
Threats, ransomware & breaches Official Claude Code Extension on Cursor Marketplace Trojanized with Persistent SSH BackdoorCybersecurity researchers have disclosed that a trojanized version of Anthropic's official Claude Code extension was distributed through the Cursor Marketplace as a legitimate update, attempting to install a persistent SSH backdoor on affected systems. The malicious update, version 2.1.313, was… The Hacker News · Global · 30 Oct 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.