Polymarket confirms cyberattack on third-party provider after outages
The company suffered outages starting at 2 p.m. Eastern U.S. time on Thursday and eventually attributed the downtime to a compromise involving an unnamed provider.
The Record ·
Today, page 37
Russian popular home goods chain faces days of disruption following cyberattack
Poryadok, which operates 48 stores across 32 Russian cities, first reported technical problems on Sunday, saying its website, mobile app and physical stores were temporarily unavailable.
The Record ·
Binance Hit by Record-Breaking $6.3bn Hack in Largest Cryptocurrency Heist in History
Leading cryptocurrency analysts have attributed the cyber-attack to a North Korean elite hacking unit
Infosecurity Magazine ·
Endpoint
Microsoft finally fixes VPN issues caused by September updates
Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. [...]
BleepingComputer ·
Vulnerabilities
Drupal Commerce Core Vulnerability Exploited Against Online Stores
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores appeared first on SecurityWeek .
SecurityWeek ·
Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison
The Hacker News + 3 outlets ·
AppSec
$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek .
SecurityWeek ·
AI
Open-weight AI model GLM-5.3 cheated its way to correct answers
Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring an LLM’s ability to plan and execute multistage attacks under realistic constraints.
Help Net Security ·
Binance links $6.3 billion crypto theft to compromised DevOps laptop
Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop. [...]
BleepingComputer ·
AIReport
Trojanized Claude Code Extension Distributed Through Cursor Marketplace
9 outlets · latest: The Hacker News ·
VulnerabilitiesHighCVSS 8.8
TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek .
SecurityWeek ·
Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record
About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an…
Help Net Security ·
As Russia's Cyberwar Evolves, Belarus Steps Forward
Dark Reading ·
VulnerabilitiesReportKEV
GitLab Patches Maximum-Severity Flaw; CISA Says It Is Exploited
6 outlets · latest: The Hacker News ·
Fake IT help desk callers got by on little more than names and email addresses
Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements.
Help Net Security ·
What exactly is ISOC? And what does it mean for you?
Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected in the…
Help Net Security ·
Threat Intel
Scammers rebuild fake shopping sites within hours of a takedown
One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates and security codes, according Akamai’s Fraud and Abuse Report…
Help Net Security ·
Vulnerabilities
Smart TVs can harbor unpatched security flaws and track what you watch
Smart TVs and connected plugs accounted for a large share of recorded security weaknesses in household devices, according to Bitdefender’s 2026 IoT Security Landscape Report.
Help Net Security ·