TokenPost topic
cybersecurity
641 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- Chainalysis Used Large Language Models in Response to Credential Exposure
The company said hackers obtained password hashes and valid authentication tokens tied to all platform users. Phased restoration of KYT and Address Screening began Nov. 6.
· Technology
- Anthropic Adds New Security Controls for Claude Enterprise Administrators
Inference hooks are now generally available, and new controls cover organization settings, managed devices and endpoint monitoring.
· Technology
- Trail of Bits Highlights OpenAI’s Automated Vulnerability Pipeline
The announced system is intended to automate vulnerability discovery, exploitation and patching while reducing manual work.
· Technology
- U.S. Agencies Warn of Cyber Threat to Industrial Refrigeration
The joint statement says an intrusion could alter temperatures and cause fire hazards, inventory losses or changes to equipment service life.
· Technology
- OpenAI Partners With JPMorgan on Codex and Cybersecurity AI
JPMorgan plans to use both tools internally to strengthen security. The agreement also covers engineering and broader work across the bank.
· Business
- OpenSSH Workaround Addresses Alpine Password-Authentication Bypass
Active SSH password login may expose key-only accounts. Alpine advises operators to update `openssh` and restart `sshd`, the SSH server daemon.
· Technology
- Chainalysis Takes Investigative Tools Offline After User Credentials Exposed
The company required all users to reset passwords and rotate API keys. Some customers' KYT accounts may have been accessed without authorization.
· Technology
- OpenAI Opens GPT-6 Cyber to Select Customers in Limited Release
The model is credited with finding high-risk Firefox flaws and developing usable exploits for Linux kernel vulnerabilities.
· Technology
- OpenAI Says GPT-6 Cyber Found 81 High-Severity Firefox Flaws
The model also reproduced 1,724 Linux kernel vulnerabilities and received OpenAI's highest cybersecurity risk rating.
· Technology
- Insight Raises 2026 Adjusted EPS Outlook to $13.55-$13.75
The company also forecasts 12.5%-14% gross profit growth for 2026 after gains across its third-quarter business.
· Business
- SignalPlus Puts Attack Losses Below $82,000, Pledges Full Reimbursement
Some user accounts without IP allowlisting were affected. SignalPlus also temporarily suspended its terminal while responding to the attack.
· Technology
- Microsoft Paint Fix Runs Into Store Update Failures on Windows 11
Microsoft lists Paint version 11.2605.91.0 as fixed for CVE-2026-83844, but administrators said the Store kept offering version 11.2605.81.0.
· Technology
- Mercado Bitcoin Loss Estimate Rises to $48.6 Million After Hack
Funds continued moving from customer deposit addresses for about four hours after the Brazilian exchange said the incident was contained.
· Technology
- Chainalysis Begins Restoring Screening Tools After Security Incident
Customers must submit trusted IP addresses, reset passwords and rotate API keys before registering transactions.
· Technology
- GitBook Traces Production Breach to SSO Flaw; Trade.xyz Named as Target
SlowMist security chief 23pds identified Trade.xyz as the customer. Trade.xyz said its own systems showed no signs of compromise.
· Technology
- Chainalysis Says Hack Exposed Data Tied to Its Entire User Base
The disclosed categories included password hashes and live tokens. Phased restoration of KYT and Address Screening began Nov. 6.
· Technology
- Binance Co-Founder He Yi Urges Connected Platforms to Review Security
Binance removed all API keys associated with SignalPlus as a precaution. He Yi asked platforms to get in touch promptly if they found suspicious activity.
· Technology
- CERT-In Says AI-Assisted Attacks Stole Cryptocurrency Exchange Keys
Repeat attacks involved nonbank financial companies and fintech firms, with some targeted again after incomplete remediation. CERT-In did not identify exchanges among the repeat targets.
· Technology
- Crédit Mutuel Arkéa Says Cyberattack Caused $112 Million Loss
The French lender said funds were converted into digital assets, some were blocked and recovery efforts are underway.
· Technology
- AI cuts cyberattack costs, putting slow-patching schools, hospitals and small firms at risk
An AI-assisted campaign breached 11 organizations in 26 seconds. Andreessen Horowitz says falling attack costs leave slow-patching schools, hospitals and small businesses increasingly exposed.
· Insights & Views
- Crédit Mutuel Arkéa Restores Nearly All Services After Cyberattack
The French bank said customer funds were unaffected, while some transfers were delayed during security checks and added safeguards.
· Technology
- Tech Data Advanced Private Limited Brings SISA Cybersecurity Tools to India
The agreement gives Indian system integrators and managed service providers access to SISA’s security, compliance and risk offerings.
· Business
- South Korea Has Not Begun Sanctions Talks Over Binance Theft
A South Korean official said the government still lacks a full account of the incident. The FBI has attributed the theft to North Korea.
· Regulation
- Palo Alto Networks in Talks to Buy AI Security Startup Clutch for About $500 Million
The Israel-based startup’s discussions with Palo Alto Networks are ongoing and may not lead to a deal.
· Business
- 赵长鹏 Urges Users to Distinguish .cam From .com in Trust Wallet Warning
He reposted a security researcher’s warning on Thursday, Nov. 5.
· Technology
- Visa Opens Six Singapore Hubs for AI, Stablecoins and Cybersecurity
The Paya Lebar Green center brings together more than 1,500 professionals, while Visa plans to expand research, engineering and innovation roles in Singapore.
· Business
- Binance Founder 赵长鹏 Urges Joint Defenses Against Cyberattacks
He said attackers spent five to six months assembling a chain that used social engineering, interview-related phishing and AI to find system weaknesses.
· Technology
- Node.js Plans Nov. 11 Security Updates for Three Release Lines
The updates cover release lines 26.x, 24.x and 22.x, and the most severe issue is rated HIGH.
· Technology
- Codex Usage Statistics Include gpt-6.2-astra Identifier
A possible release could include Astra and Sol model lines and a cybersecurity-focused Cyber model; pricing and release channels remain unspecified.
· Technology
- Crédit Mutuel Arkéa Confirms Scale of $133 Million Estimate
The bank did not confirm the exact amount. It said customer assets were unaffected and almost all operations had resumed Nov. 4.
· Technology
- Google's November Android Patch Fixes Critical Zero-Click RCE Flaw
CVE-2026-58868 affects Android 14, 15, 16, 16 QPR2 and 17; patch level 2026-11-05 or later covers all issues in the November bulletin.
· Technology
- Crédit Mutuel Arkéa Says Third-Party Platform Was Entry Point, Denies Fortuneo Link
The group said money moved from its own account to other financial institutions and may have been converted to cryptocurrency. It said customer assets were unaffected.
· Technology
- SlowMist's 23pds Warns APT29 Is Spreading iOS and Android Exploits
The campaign uses compromised websites and hijacked web analytics scripts to reach mobile users.
· Technology
- South Korea Plans Immediate Incident Notices for Virtual Asset Service Providers
New guidance would require providers to notify two financial bodies immediately after discovering a security incident. Broader legislation is targeted for submission in the first quarter of 2027.
· Regulation
- South Korea Plans Immediate Crypto Incident Reporting to Two Agencies
The Financial Services Commission announced the guidance plan Nov. 5 as authorities pursue a broader security law by the first quarter of 2027.
· Regulation
- Binance Probe Traces Wallet Breach to Compromised Tools and Credentials
Attackers used employee devices and an internal AI tool to reach signing infrastructure. Binance said affected systems were rebuilt and an independent review was commissioned.
· Technology
- Rapid7 Targets About $130 Million in 2026 Free Cash Flow
The company plans its first autonomous security operations center release for general availability around RSAC 2027 and expects total fourth-quarter ARR of about $812 million.
· Business
- OpenAI Pipeline Finds 948 Linux Kernel Flaws and Generates Patches
The vulnerabilities involved local privilege escalation. The announcement did not specify the kernel versions tested or how often Linux maintainers accepted the patches.
· Technology
- Trade.xyz Says GitBook Confirmed Breach Behind Documentation Incident
Trade.xyz said its internal review found no evidence of a breach in its own systems and that its controls blocked the incident. It plans to leave GitBook in the coming days.
· Technology
- AI Helps Volunteer Engineers Flag More Than 10,000 Potential Bitcoin Vulnerabilities
Talip said some findings have been assessed, disclosed and fixed, while disclosure of others continues. The AI-generated results need independent validation because they may include false positives or overstate severity.
· Technology