Author: HackWatchit

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack Pierluigi Paganini November 03, 2026 Binance reveals how fake job interviews, malware and internal AI abuse enabled attackers to steal $6.34 billion. The Binance security incident on October 29 shows how a fake recruitment process can become the entry point to critical financial infrastructure. The attackers combined social engineering, compromised developer tools, stolen credentials and abuse of an internal AI application to reach the cryptocurrency exchange’s wallet signing systems. “Woah – so the Binance hack was indeed via a dodgy job interview for one of…

When unusual activity was detected on a European bank’s central IT system, its internal security team quickly recognized that the incident warranted immediate response. They discovered unauthorized VPN-based access attempts that spanned several months. They then engaged Unit 42 to determine the full scope of the intrusion, identify any persistent footholds and secure the environment. While the activity appeared to be a stealthy cyberespionage campaign, the actual intrusion was made possible by gaps in foundational security controls. Rather than relying on novel techniques, the threat actor succeeded through persistence, exploiting weaknesses that stronger identity protections and basic security hygiene could…

Software security must adapt for the AI era Generative AI has created a security crisis of scale. It is also the most significant opportunity we have faced in three decades of internet innovation. Every new era of connectivity has made us rethink what resilience means, and this one is no different. AI-generated code brings new complexity, and it also gives us the tools to build security that is more pervasive, proactive, and precise than before. We are moving beyond the manual security gates of the past. We now use AI to analyze code with unprecedented depth. We have already operationalized…

Frontline Education is notifying over 1.3 million people that their personal information was compromised in a data breach. The incident occurred on August 14 and involved the exploitation of a vulnerability in a third-party software product to gain unauthorized access to Frontline’s environment. Frontline, which provides administration software purpose-built for K-12 school districts, addressed the security defect and reinforced security. The attack was fully contained by August 15, the company says in an incident notice. The investigation into the data breach determined that the hackers stole the personal information of both school district staff and students from the Frontline Central…

In brief OpenAI launched its Grid Protectors Program, promising to reduce electricity demand at future AI facilities during grid emergencies. A planned Georgia facility could cut its electricity consumption by up to 1,000 megawatts during periods of high demand. The announcement comes as OpenAI prepares to rebrand data centers as “AI compute campuses” amid growing public opposition. OpenAI wants its massive AI data centers to help keep the lights on when electricity grids come under pressure. And, apparently, it would also prefer that people stop calling them AI data centers.The ChatGPT developer announced its Grid Protectors Program on Monday, a…

DANNY PALMER It’s October, which means it’s Cybersecurity Awareness Month. GRAHAM CLULEY Oh no, the one month of the year we have to care about cybersecurity, and then the 11 months we can have off. Yes, yes, it is, isn’t it? DANNY PALMER I’ve got up all my decorations, sent my cards. Very exciting times. GRAHAM CLULEY Smashing Security, episode 487. Clippy’s Crypto. Welcome back with Graham Cluley and special guest Danny Palmer. Hello, hello, and welcome to Smashing Security episode 487.My name’s Graham Cluley. DANNY PALMER And I’m Danny Palmer. GRAHAM CLULEY Danny, great to have you back. I…

The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides for hefty fines against data brokers that publish personal information on state law enforcement officials. In the face of repeated stonewalling and prevarication by attorneys for Radaris, the judge in the case ordered that radaris.com and more than a dozen other data broker domains be transferred to the plaintiffs. The radaris.com website, prior to…

Cybersecurity firm Bitdefender has investigated what it believes is Europe’s first ransomware incident involving a human operator and suspected AI-driven command retries. In research shared with Hackread.com ahead of its publication, the cybersecurity firm detailed how a 3AM (ThreeAM) ransomware affiliate breached a UK school estate with 47 systems across separate Active Directory domains and encrypted about 37 machines. 3AM ransomware group’s dark web leak site Human Decisions, Automated Retries In its blog post, published today, Bitdefender described the intrusion as “a hybrid operation in which some parts show a human operator at the keyboard while others behave like an…

Executive Summary Unit 42 investigated a multi-stage network intrusion against a telecommunications organization that occurred in September 2024, which we are tracking as cluster CL-STA-0954 (aka UNC5820). The attackers behind CL-STA-0954 achieved an initial compromise by exploiting CVE-2024-47575 against a centralized FortiManager appliance. From that single appliance, our observations are that the attackers exfiltrated an archive containing running configurations, cryptographic material and database files containing information about more than 500 managed FortiGate firewalls. Those firewalls protected the target’s own infrastructure and the networks of its clients. Following the initial compromise, the attackers behind CL-STA-0954 demonstrated a complex level of tradecraft.…