TokenPost topic
cybersecurity
641 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- Binance Says ShinyHunters' 335 Million-Record Claim May Be a Scam
The exchange says it has found no evidence of exposed customer data, account credentials, wallet keys or internal systems. Its review is ongoing.
· Technology
- Binance Says $900,000 Offer for 335.9 Million Records Is Likely a Scam
The exchange cited inconsistencies in the offer, which purports to include identity documents, credentials and private keys.
· Technology
- Bitcoin Fell 6% After Binance Hack as Bitcoin Trading Volume Rose 67%
Bitcoin’s daily trading volume reached $40.9 billion in the same 10-hour window. A broader mix of trading venues can help support liquidity during exchange disruptions.
· Investing
- LNbits Tells Operators to Take Servers Offline
Bittipbot operator Kevin Ravensberg said attackers withdrew 2,285,545 satoshis from his LNbits instance.
· Technology
- LNbits Tells All Users to Shut Down Servers After Attack Wave
The open-source Bitcoin Lightning wallet system is preparing several security patches and says it will issue an update as soon as possible.
· Technology
- Claude Code Settings Expose Credentials in 1,122 Public GitHub Files
The files held 1,379 distinct credentials, including 122 Supabase service keys. A broader review found 2,539 passwords across 1,994 repositories.
· Technology
- Layer3 Intel Finds White House Network Served as Proxy Exit on 26 Days
Synthient inferred Rave might be involved, but the test did not confirm the app was installed on any device.
· Technology
- X Account Promotes a Purported TradingView Premium Crack Amid Malware Warnings
The download uses a password-protected archive and a KeyGen tool; commenters warned it could steal account information and crypto wallets.
· Technology
- SignalPlus Reimburses 23 Users $81,897 After Nov. 4 Attack
The platform completed payments within 72 hours of detecting unusual activity and is tightening security controls before gradually restoring services.
· Technology
- Coinbase CEO Describes North Korean Job Applicants at Crypto Firms
Brian Armstrong also described separate offers of hundreds of thousands of dollars to Coinbase support staff to bring phones inside company facilities and photograph screens.
· Technology
- U.S. Urges North Korea Sanctions Enforcement After FBI Links Binance Theft
A State Department spokesperson called for coordinated action against North Korean cyber activity and said sanctions can disrupt funding for weapons programs.
· Regulation
- Changpeng Zhao Warns Banks May Face Greater Cyber Risk Than Exchanges
The warning followed an Oct. 29 theft of roughly $6.3 billion from Binance. Industry partners froze nearly $3 billion of the stolen assets.
· Technology
- Binance Founder Changpeng Zhao Rejects Guarantee After Breach Involving $6.34B in Assets
At the Oxford Union on Nov. 3, Zhao said complex systems cannot be guaranteed immune to attack and acknowledged that some basic security procedures at Binance were not strictly enforced.
· Technology
- TRM Labs Policy Chief Calls for Offensive Cyber Operations After Binance Theft
Ari Redbord warned that the coordinated response may do little to deter future attacks while potential payoffs remain high. He urged governments to target laundering networks and banks used to cash out stolen crypto.
· Technology
- Gnosis Pay Confirms Breach Exposed Personal Data on Consumer Cards
The company said customer funds and its white-label card platform were unaffected, and made 3D Secure mandatory for online payments.
· Technology
- Employment-Related Scam Losses Totaled $363 Million in 2025
Victims filed 24,688 employment-related complaints. Almost $13 million in reported losses involved AI-related employment scams.
· Technology
- DeepSeek Model Completes 21 of 31 Tasks in Vals AI Hacking Test
OpenAI’s restricted GPT-6 Sol finished 27 objectives, while each DeepSeek attempt cost less than $3 versus about $22.
· Technology
- OpenAI Partners With Hacktron on System Security
The partnership will test OpenAI’s connections to third-party services as the company works to strengthen its defenses.
· Technology
- Bowman Says Cybersecurity Is a Major Concern for Bankers
She also urged government agencies to coordinate against fraud and said the Federal Reserve has developed third-party risk guidance for some banks.
· Regulation
- SEAL Estimates Eight Weeks of Access Before Binance’s $6.34B Theft
Binance’s timeline places access to wallet-signing operations on Oct. 29; the September start day behind SEAL’s estimate is unspecified.
· Technology
- Foundation Says Phishing Attempt Targeted 21,463 Email Addresses
Foundation said attackers accessed customer records, email systems and domain settings. Scammers later called customers seeking Bitcoin (BTC) wallet seed phrases.
· Technology
- SEAL Puts Binance Device Compromise About Eight Weeks Before $6.3 Billion Exploit
Binance says the broader campaign began with a separate employee device compromise in June; attackers reached systems needed for wallet operations on Oct. 20.
· Technology
- Chainalysis Restores Three Services After Expanded Breach Disclosure
The company’s Nov. 4 update expanded its Oct. 30 notice to include password hashes and live tokens for all users.
· Technology
- Keystone Releases Nexus App Security Update After Cyberattack
Version 1.3.7 is available on Google Play, while the iOS release awaits App Store review. Keystone said it found no evidence that user assets or personal information were affected.
· Technology
- GOPAX Halts Trading and Withdrawals as It Plans a Cold-Storage Move
The South Korean exchange paused deposits and standard withdrawals early Friday. Customers can still request withdrawals through support, though manual processing may take longer.
· Technology
- The $6.3 Billion Theft at Binance May Prompt Tighter Insurance Reviews
Insurers are expected to review crypto firms’ security and ask whether clients are vulnerable to a similar attack. Marcos Alvarez said the effectiveness of state-backed attack exclusions in a major loss remains untested.
· Technology
- Palo Alto Networks in Talks to Buy Clutch for About $500 Million
The proposed cash deal may include milestone payments. Clutch had an $85 million valuation in January 2025 and has close to $10 million in annual recurring revenue.
· Business
- CZ Urges Alpine Linux Users to Patch a Decade-Old OpenSSH Flaw
The password-bypass issue affects some Alpine Linux configurations, and CZ urged users who have not fixed it to apply a repair patch.
· Technology
- Chainalysis Says Customer Data Was Exposed, Suspends Several Services
Exposed information included password hashes and active tokens. Chainalysis plans to require password resets and API key replacements as access returns.
· Technology
- Chainalysis Takes Services Offline After Customer Data Exposure
Exposed details included names, usernames, password hashes and active tokens. The company also disabled KYT and other screening tools after detecting suspicious activity.
· Technology
- GPT-6 Cyber Scores 48.5% on ExploitGym Security Evaluation
GPT-5.6 Cyber scored 32.1%, a 16.4 percentage-point gap. Academic authors developed ExploitGym with input and assistance from industry partners.
· Technology
- Chainalysis Confirms Breach Exposed User Credentials and Passwords
Names, usernames, password hashes and authentication tokens were exposed; some passwords were leaked in plaintext.
· Technology
- Chainalysis Says Attack Exposed Password Hashes and Active Tokens
All users must reset passwords; some customers’ plaintext passwords were also compromised. Chainalysis suspended transaction monitoring, address screening and login services after detecting abnormal activity.
· Technology
- Changpeng Zhao Urges iPhone Users to Update Amid DarkSword Threat
The toolkit targets flaws in iOS 18 and can run through an infected Safari page without a wallet connection or transaction approval.
· Technology
- Binance Told BlockShoals No Philippine User Personal Information Was Affected
BlockShoals said Binance also confirmed user funds were safe and would cover losses through the Secure Asset Fund for Users and company funds.
· Technology
- Saylor Warns AI Hackers Could Exploit Rushed, Untested Software
The Strategy executive chairman urged exchanges, banks and custodians to scan their systems daily with advanced AI models.
· Technology
- India's CERT-In Warns Crypto Firms of Active CRAFTY FALCON Attacks
The campaign targets financial firms, abuses payment APIs and uses public AI-driven tools to tailor attacks.
· Technology
- Shared PCs for people and AI call for access checks on every request
Andreessen Horowitz argues that devices shared by people and AI agents need access checks on every request, task-specific credentials and human approval for sensitive actions.
· Technology
- Security teams face 3,000 alerts a day as AI takes on detection and response
Security teams receive about 3,000 alerts daily and leave 63% unexamined. Andreessen Horowitz outlines AI security operations that combine threat detection, managed detection and incident response.
· AI
- AI security links live vulnerability protection with permanent code fixes
AI security tools could protect running systems within hours, then deliver permanent code repairs. Andreessen Horowitz outlines a workflow combining live defenses, version-specific patches and automatic rollback.
· Technology