Binance says hackers who stole billions in crypto spent months planning heist
2026-11-04T20:51:38Z•d6edcd5b7a4c0a37b7c33463cd2a4e4f8ae0a37f3278d3cab222c23deb0bad12
AI securityAndroid botnetBinanceCursor extensionDHSEDK2IoT securityNorth KoreaPHP remote code executionPlex exploitationSSH interceptionSecure BootTLS certificatesTorUEFI bootkitcertificate authority compromisecryptocurrency theftdata breachfirmware vulnerabilitymercenary spywarephishingsupply-chain compromisezero-click exploit
What happened
Ars Technica security feed covering major incidents and vulnerabilities, including a record Binance cryptocurrency theft attributed to North Korea, Android TV botnet disruption, UEFI bootkits and EDK2 flaws, software supply-chain compromise, TLS certificate authority failures, Tor exit-node hijacking, PHP and Plex exploitation, data exposures, mercenary spyware, and insecure internet-connected devices. Several reports describe active exploitation or highly consequential attacks, but the feed does not provide definitive CVE identifiers.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- d6edcd5b7a4c0a37b7c33463cd2a4e4f8ae0a37f3278d3cab222c23deb0bad12
- Enrichment time
- 2026-11-04T20:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.