TokenPost topic
cybersecurity
641 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- LNbits Rotates Authentication Keys in Follow-Up Security Patch
Version 1.7.1 urges all users to update but does not explain which keys are rotated or whether the change replaces earlier wallet and credential reset guidance.
· Technology
- Researcher Says Apple Left worse_query Flaw Unpatched in iOS 27.2.1
SlowMist Chief Information Security Officer im23pds corrected an earlier statement that the update blocked the flaw. Apple’s security advisory lists nine fixes but does not mention worse_query.
· Technology
- Bitget Wallet Flags 37,000 Weekly Signing Requests for Potential Phishing
The Q3 2026 average was 7.4 times the Q2 figure, but the tally does not measure unique attacks or confirmed financial losses.
· Technology
- Across Protocol Says Domain Takeover Forced Its Website Offline
The team said an attacker gained control through a social-engineering attack targeting domain registrar Namecheap. Cloudflare and SEAL911 helped block a phishing site.
· Technology
- Cogent and OpenAI Launch AI Agents for Enterprise Vulnerability Fixes
The agents can make customer-authorized changes and check whether fixes worked, with policy controls and sandboxes for higher-risk tasks.
· Technology
- Anthropic Says It Has Reached an AI Research Acceleration Threshold
The company also disclosed that a model accessed real computer systems without authorization during a 2026 prelaunch security assessment.
· Technology
- South Korea's FSI Breach Exposes Employee Data and Prompts Review
The breach exposed about 300 records with financial institution employees’ names and birth dates, plus roughly 350 masked contact details.
· Technology
- SEAL Triages 60 Security Incidents, Four Protocol Compromises Involve $3.87 Million
The weekly tally also included losses from social engineering, infrastructure exploits and phishing, along with thousands of collected threat indicators.
· Technology
- Bitcoin Core Discloses Flaw That Could Halt Mining After Chain Reorg
The bug affected five releases across versions 28 and 29; Bitcoin Core fixed it in October 2025, and the affected versions have since reached end of life.
· Technology
- Bitcoin Core Flaw Can Halt Block Template Creation After Reorganization
The flaw affects Bitcoin Core 28.0 through 28.2 and 29.0 through 29.1. Fixed releases appeared in October 2025, more than a year before the details became public.
· Technology
- Bitcoin Core Discloses Bug That Could Repeatedly Stall Block Processing
The flaw could cause repeated 10-minute delays under specific peer or configuration conditions. Fixes are included in Bitcoin Core 30.0 and 29.2.
· Technology
- Google Says Wiz Found a Zero-Day Flaw With Carbon for cyber
The security-focused version remains limited to Google’s Fairwind program, while paying developers can access the general model through an API.
· Technology
- LNbits Releases 1.7.0 Security Update, Warns All Older Versions Are Affected
The upgrade alone does not protect credentials that may already be exposed; LNbits recommends changing keys and migrating servers if compromise is suspected.
· Technology
- Ledger CEO Says Everyone Will Eventually Face Hacking Risk
Gauthier said perfect security does not exist for Ledger or other companies.
· Technology
- Binance Flags iOS Vulnerability That Could Expose Wallet Credentials
The exchange described the issue as an iOS-level risk that is not unique to Binance.
· Technology
- N-able Takes Hosted N-Central Offline After Vulnerability Disclosures
The company urged customers to take down self-hosted deployments as a researcher described flaws involving credential theft and administrator access.
· Technology
- Six Malicious Pull Requests Sought Changes to Vizor and Zingo Wallets
The unmerged requests paired code intended to steal credentials with instructions telling AI reviewers not to flag secret uploads.
· Technology
- Anthropic Says Claude Fable 5.2 Had About 55% Fewer Safety Blocks
Cybersecurity-related blocks fell about 60%, Anthropic said. Claude Mythos 5.2 used outside files or credentials in 3.1% of sandbox-escape scenarios.
· Technology
- Bay Raises $50 Million to Expand Its AI Agent Security Platform
The funding comprises a $37 million Series A and a previously undisclosed $13 million seed round. Bay says its software reviews proposed actions in the context of an agent’s full session.
· Business
- Daylight Closes $80 Million Series B Led by Growth Equity at Goldman Sachs Alternatives
The round valued the cybersecurity startup at $400 million.
· Business
- Google Patches Chrome Zero-Day and Eight Other Flaws in Security Update
The nine vulnerabilities include seven rated high severity and two rated medium.
· Technology
- Google Fixes Nine Chrome Flaws, One It Says Attackers Exploit
The desktop update includes seven high-severity fixes and is rolling out over the coming days to weeks.
· Technology
- Google Patches Chrome Zero-Day After Confirming Active Exploitation
The flaw is in Chrome’s XML component. The update fixes eight other vulnerabilities as well.
· Technology
- NEAR AI Says Attackers Downloaded Data Tied to About 100 Accounts
API keys for two NEAR AI Cloud customers appeared in logs and were revoked. The company said attackers may have observed requests on Nov. 8.
· Technology
- SlowMist Team Warns Ethersphere npm Package Was Compromised
The team said compromised GitHub accounts spread code across multiple operating systems and urged users to upgrade to version 0.56.3.
· Technology
- NEAR AI Says SGLang Vulnerability Enabled Internal System Access
NEAR AI said it blocked the access and fixed the vulnerability, but its cloud service remained paused pending security confirmation.
· Technology
- NEAR AI Pauses Cloud Inference After Finding Unauthorized System Access
The company said it closed the access but will keep the service suspended until it can safely resume. NEAR Protocol and other services were unaffected.
· Technology
- North Korean Cyber Units Were Established in the Late 1990s
Cyber operatives train for overseas operations, and elite hackers can retain up to 30% of illicit proceeds.
· Technology
- Chainalysis Restores Data Solutions After All-User Data Exposure
Customers must submit trusted IP addresses, reset passwords and rotate API keys where applicable before registering transactions.
· Technology
- Changpeng Zhao Denies ShinyHunters Stole 335 Million Binance Records
The group’s alleged ransom demand was $900,000. Zhao argued that anyone with private keys would move funds instead of selling data.
· Technology
- North Korea Selects Up to 200 Students a Year for Computer Science
Top performers continue to elite universities for advanced math and cryptocurrency studies. The broader program also trains cyber operatives and overseas IT workers.
· Technology
- Cisco and IBM Plan Separate Claude Mythos Security Integrations
Cisco’s AI Defense targets AI testing, while IBM plans code scans and exploitability checks through Concert Protect, with general availability aimed for early 2027.
· Technology
- Binance Founder Zhao Rejects $900,000 Data Sale Claim as Scam
Binance said its review found no evidence the listing compromised its systems. The advertised 335.9 million lines are not a verified count of users.
· Technology
- Fireworks Says Hackers Accessed Customer Data and Unfinished AI Models
The AI infrastructure company linked the activity to LLMjacking and is investigating with Unit 42.
· Technology
- Attackers Exploit OpenSSH Password Bypass Affecting Alpine Linux
Successful exploitation has been observed, with 20 attempts logged. Alpine operators should patch and restart SSH or disable password authentication.
· Technology
- Trojanized Swarm Releases Put Bee Node Wallet Credentials at Risk
The malicious versions targeted Bee node files and added a remote-control backdoor; no financial losses have been confirmed.
· Technology
- CZ Rejects ShinyHunters’ Claim of About 335.9 Million Binance Records
The group demanded $900,000 for the alleged cache, which it said included account passwords, contact details and wallet private keys.
· Technology
- Red Hat’s OpenShift 5 Adds AI Troubleshooting and Post-Quantum Security
The platform became available to existing subscribers Nov. 9. Red Hat expects RHEL 10.3 and 9.9 to arrive in the coming weeks.
· Technology
- Binance to Manage Internal AI Tools Under Critical-Infrastructure Standards
The exchange is also working with AI and security companies to establish a fund focused on threats involving blockchain and AI.
· Technology
- India's Central Bank Deputy Governor Urges Banks to Strengthen Tech Resilience
Swaminathan J cited cybersecurity, data protection and oversight of outside service providers in an Oct. 23 address in Chennai.
· Regulation