Article Read Time
Top 5 Cyber Security News Stories
- Binance Reveals How a Fake Job Interview Led to a $6.34 Billion Theft
Binance’s first incident report describes a months-long campaign that started with a tampered Homebrew install and ended with attackers compromising three wallet engineers. A fake recruiting process and a booby-trapped “coding assignment” delivered zero-day malware that endpoint protection missed. The FBI attributes the theft to North Korea’s TraderTraitor group, and roughly $2.85 billion has been frozen or intercepted so far.
Source: SecurityWeek, https://www.securityweek.com/rigged-coding-assignment-abused-ai-tool-opened-path-to-6-billion-binance-heist/
- Exploited WordPress Core Flaw Leaves a Window Open Even During the Fix
CVE-2026-119977 lets an unauthenticated attacker run code on WordPress sites from 4.7 through 7.1.3 during a core update, and CISA has added it to its Known Exploited Vulnerabilities catalog. The patch (7.1.4) randomizes the temporary upgrade folder, but the update that installs it still uses the old, predictable updater. Administrators should block web access to wp-content/upgrade before updating.
Source: The Hacker News, https://thehackernews.com/2026/11/installing-fix-for-exploited-wordpress.html
- DigiCert Discloses Breach Tied to a Server Migration Error
A February 2025 migration exposed an internal business system with open self-registration, and an authorization flaw let one unauthorized account read archived customer records between June 27 and July 2, 2026. Names, business contact details, and, for some people, submitted ID documents were exposed. DigiCert says CertCentral, DigiCert ONE, and issued certificates were not compromised.
Source: BleepingComputer, https://bleepingcomputer.com/news/security/digicert-data-breach-exposes-customer-information-identity-documents
- SonicWall SSL-VPN Bug Can Sidestep SAML-Enforced MFA
CVE-2026-19868 lets a user holding valid credentials for another login method bypass SAML checks on SonicOS SSL-VPN, including SAML-enforced MFA. It is the only exploited flaw among seven in advisory SNWLID-2026-0014, CISA set a November 20 deadline for federal agencies, and no workaround exists. The fix is SonicOS 7.3.4-7013 or 8.2.3-8015.
Source: SecurityWeek, https://www.securityweek.com/sonicwall-patches-exploited-sonicos-bug-that-weakens-vpn-logins/
- “SSHole” OpenSSH Bypass Exploited Within Hours of Disclosure
CVE-2026-123158 lets an attacker log in over SSH with an oversized password (257 to 1,024 bytes) on Linux systems using musl libc without PAM, including Alpine Linux defaults. Previdian saw the first exploitation attempt less than nine hours after disclosure and confirmed root access on a honeypot. Upgrade to OpenSSH 10.6p2 or a patched distribution package and review logs for unexpected password logins.
Source: The Hacker News, https://thehackernews.com/2026/11/hackers-exploited-openssh-sshole-flaw.html