TokenPost topic
cybersecurity
641 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- AI Campaign Reached 10 Organizations, With Unauthorized Access or Data Retrieval Confirmed
Human operators directed 25 operations against at least 19 organizations in August and September 2026. The findings do not establish a success rate.
· Technology
- SlowMist CISO Flags iOS Tool Claiming Crypto Wallet Data Theft
The seller advertises support for iOS 13 through 27.2 and a centralized control panel. 23pds questioned the claimed compatibility with iOS 27.2.
· Technology
- Coinone Discloses MetaM Server Breach Involving Customer Support Data
Potentially affected records span 11 data categories, and the exchange has not disclosed how many customers may be involved. Coinone plans to notify customers or offer a breach lookup service.
· Technology
- Crypto Trader Says WhatsApp Attack Left Him With Just $800
Harley Lewis Foote said the attacker monitored his public Bitcoin (BTC) short for five days and closed it as Bitcoin neared $68,000.
· Technology
- FortiGuard Labs Identifies SQL Server Attacks Using Monero Miner and Gh0st RAT
The activity has been underway since at least early October 2026, but the victim count has not been confirmed.
· Technology
- DOJ Seizes More Than $1.2 Billion in Crypto Tied to Binance Hack
The action also covered infrastructure tied to FaceStealer, a social engineering scheme linked to more than $400 million in theft.
· Regulation
- Anthropic CEO Says Fixing Vulnerabilities Is Harder Than Finding Them
Dario Amodei said Anthropic and its customers each found hundreds of thousands of software flaws. JPMorgan Chase CEO Jamie Dimon described a large effort to repair some vulnerabilities exposed by Claude Mythos.
· Technology
- TSMC Confirms Employee Data Leak as Sellers Seek 3 Bitcoin
The sellers claim to have about 46,000 records and threatened to publish them if no buyer emerged within a week.
· Technology
- Cohere Announces Acquisition of AI Code Review Platform cubic
Cohere did not disclose financial terms. The deal follows its October letter of intent to acquire cybersecurity startup AISLE.
· Business
- Nightmare Eclipse Says SignDrop Can Give Some Windows Users SYSTEM Access
Will Dormann reproduced the exploit but said it did not work on every Windows 11 version; researchers identified Windows 11 26H2 and a CLFS authentication setting as relevant to exposure.
· Technology
- Fireworks AI Breach Stole Uber Drivers’ License Data From Thousands
Counts in Massachusetts, South Carolina and Rhode Island total 7,870; Illinois’ number is pending, and no California total was disclosed.
· Technology
- CrowdStrike Climbs 9% After Rosenblatt Lifts Target to $275
Rosenblatt kept its Buy rating and expects a slight fiscal third-quarter 2027 beat and guidance increase, citing partner feedback and demand.
· Insights & Views
- ArcticRAT Uses Grok to Analyze Stolen Texts for Crypto Account Data
The Android trojan began with 11 cryptocurrency app targets and now scans texts for one-time passcodes and transaction alerts. Grok’s responses are returned in a structured JSON format.
· Technology
- Court Authorizes Seizure or Freeze of More Than $1.2B in Stolen Binance Crypto
The Justice Department also seized cloud infrastructure used by FaceStealer, a separate campaign responsible for more than $400 million in crypto theft over 18 months. More than $2.7 billion tied to the Binance theft …
· Regulation
- U.S. Seizes FaceStealer Cloud Systems in Crypto Theft Exceeding $400 Million
The operation used deepfake video to trick victims into installing malware and increasingly targeted open-source software developers.
· Technology
- KeyBanc Upgrades Palo Alto Networks and Sets a $380 Target
The bank cited an expected acceleration in security spending through 2027 and Palo Alto’s AI security products.
· Investing
- Chainstack's Node Credential Rotation Requires Old Keys to Be Disabled
Replacement credentials and old ones remain active together until customers complete the switch. Rotating node credentials does not change a multichain authentication token.
· Technology
- Binance Completes Coverage After Committing More Than $6.34B
Separately, U.S. courts authorized seizure or restraint of more than $1.2 billion in stolen Binance cryptocurrency, part of more than $2.7 billion frozen.
· Technology
- MapleStory Universe Confirms Unauthorized Access to Off-Chain Servers
The team says it blocked the access path and found no impact to its blockchain, smart contracts or private keys.
· Technology
- MapleStory Universe Breach Exposes User Data and API Keys for 328 Apps
The blockchain gaming project suspended services after discovering unauthorized access to off-chain servers Nov. 12. It said its blockchain and smart contracts were unaffected.
· Technology
- U.S. Justice Department Seizes Systems Tied to $400 Million Crypto Scheme
The North Korea-linked FaceStealer operation targeted crypto and Web3 workers through fraudulent video meetings.
· Regulation
- Binance Commits More Than $6.34 Billion to Cover Breach Losses
The exchange’s 198-token Proof of Reserves snapshot is posted, but its full zero-knowledge proof was still being generated.
· Technology
- Coldcard Flaw Linked to About 1,816 Bitcoin (BTC) Moved From More Than 5,200 Addresses
The transfers were valued at about $116 million. Coinkite CEO Rodolfo Novak said an AI model found the flaw after human reviewers missed it.
· Technology
- Horizon3 Announces AI Security Lab Using NodeZero Test Data
The lab will study attacks and defenses using data from NodeZero penetration tests. Horizon3 named Purdue University computer science associate professor Z. Berkay Celik as its inaugural director.
· Technology
- IBM Acquires AuthMind to Extend Identity Security for AI Agents
AuthMind maps links between identities and the resources they access, helping security teams spot shadow agents, unusual access and excessive permissions.
· Business
- TSMC Says It Found No Evidence of a Breach After Employee Data Appeared Online
The company linked the records to a cloud service provider and said they do not include production or customer data.
· Technology
- Michael Saylor Says Bitcoin’s Limited Design Can Resist AI Threats
He said advanced AI could strengthen hackers’ capabilities and make complex exchange and wallet software especially vulnerable.
· Technology
- Trend Micro Holds FY2026 Forecast as Nine-Month Sales Rise 10.4%
Net income and operating income fell as costs climbed. Basic earnings per share declined to ¥183.27 from ¥204.86 a year earlier.
· Business
- TSMC Confirms Employee Data Exposure as Seller Sets 3 Bitcoin (BTC) Starting Bid
The seller claims the collection contains 46,000 records, but TSMC has confirmed only that some employee data was exposed.
· Technology
- South Korea’s FSC to Permit Crypto Exchange Freezes on Suspected Hacks
The commission decided to issue a no-action opinion but gave no issuance date, freeze duration or detailed conditions. It also called for continuous monitoring and stronger wallet safeguards.
· Regulation
- South Korea Plans to Let Crypto Exchanges Suspend Deposits and Withdrawals
The proposed no-action letter would permit preventive suspensions before a breach is confirmed. The FSC also called for round-the-clock monitoring, higher cold-wallet holdings and stronger insurance coverage and reser…
· Regulation
- Binance Security Chief Warned of Fake Interview Risks Before October Attack
In September, a Binance engineer downloaded a malicious coding assignment during a fake interview. Binance linked the incident to part of the multistage attack behind the October theft.
· Technology
- Chainstack Says AI Attack Exposed Customer Account Data
The company said attackers read a production database from Oct. 26 to 31. Customer-facing services remained operational.
· Technology
- Chainstack Details Production Breach Through Unauthenticated MCP Server
The attack began at a Grafana test instance that retained its default administrator password and reached production through a server with Kubernetes cluster-admin privileges.
· Technology
- SlowMist Founder Warns Telegram Message Apps Lack Sandbox Protection
Pavel Durov announced the feature Nov. 10, with message apps under 4 KB that support interactive rendering and payments.
· Technology
- Binance Says Fake Hiring Scheme Enabled $6.34 Billion in Unauthorized Transfers
Jimmy Su said attackers used a malicious coding assignment to access an engineer’s work computer. Existing onchain authorizations remained active after Binance paused withdrawals.
· Technology
- Bitcoin Core Discloses Tor Bug That Gave Peers Whitelist Privileges on Thousands of Nodes
Only nodes with a nondefault `-whitelist` range covering their Tor daemon address were affected. Fixes shipped in versions 28.3, 29.2 and 30.0 in October 2025.
· Technology
- Scroll Patches Ethereum Proof Verifier Flaw, Says It Was Not Exploited
The flaw could have let attackers reuse old valid proofs with new inputs. Scroll said forced batch mode was never activated.
· Technology
- Anthropic Says Four AI Models Accessed Real Systems in Security Tests
A misconfigured evaluation let models reach the public internet; one gained administrator access, changed settings and read personal information.
· Technology
- Anthropic Security Program Records 37,966 Findings, 217 Marked Fixed
The ledger showed 7,349 findings as public as of Nov. 2. Since Sept. 8, total findings rose by 11,813 and entries marked fixed increased by 15.
· Technology