Saturday, October 31, 2026
$6.3 billion, gone in 20 minutes
Good morning. Escape artist Harry Houdini died on Halloween in 1926. This week, hackers pulled off a vanishing act he'd envy.
- Binance says hackers took $6.3 billion
- CISA flags two exploited Ivanti VPN flaws
- A fake Claude Code extension hit Cursor's marketplace
Presented by Cyhornet - Skip the blank page. Try Cyhornet Studio: studio.cyhornet.ai
TOP STORY
HEIST WATCH
Binance says hackers took $6.3 billion
Binance, the world's biggest crypto exchange, said a security breach hit about $6.3 billion in assets, which analysts call the largest crypto theft on record. Reuters reported that most of it drained in about 20 minutes, starting shortly after 2000 GMT Thursday. Co-CEO Richard Teng said the attack involved a compromised laptop, and that attackers manipulated the system that approves transactions to move money out of an internet-connected "hot" wallet without normal approvals. About $3 billion has been frozen. Binance said it will cover losses with company funds. TRM Labs said it is highly confident the group behind the 2025 Bybit hack, which the FBI tied to North Korea, did this too. Binance says it has not identified the attackers.
Why it matters: One laptop reached the money. Today, list who at your company can approve payments, and require a second person for large transfers.
Sources: Reuters via Yahoo Finance | Reuters explainer via Investing.com
QUICK HITS
PATCH NOW
Ivanti VPNs are under fire. CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on October 30, citing active exploitation. One is a missing-authentication bug.
What to do: Patch Ivanti Connect Secure this weekend and hunt for compromise. CISA
DEV TOOLS
A Claude Code impostor. Tampered copies of the Claude Code extension, versions 2.1.312 and 2.1.313, were served in Cursor's extension marketplace on October 29 and tried to plant an SSH backdoor. Microsoft says uninstalling alone won't remove the leftovers.
What to do: If you use Cursor, check `authorized_keys` for a key labeled `svc-telemetry`. Microsoft Security Blog
MONEY MOVES
AI spending spooks Wall Street. Intel shares plunged 28.6% Friday after results showed heavy cash burn and slowing PC demand, Reuters reported. The Nasdaq fell 2.86%.
What to do: Before funding an AI project, write down how it pays for itself. Reuters via Yahoo Finance
WORTH YOUR MONEY
Lost crypto? Skip the "recovery" pitch. The FBI says to report crypto scams at IC3 with transaction details and to be wary of anyone promising to recover your funds. FBI IC3 guidance
TODAY'S LEARNING
The Kenya-USA Technology Forum hosts a free Zoom webinar on the NIST AI Risk Management Framework today at 11:00 AM ET. Details and registration