On the evening of 1 November users got fake alerts about radiation, chemical threats and street fighting. The service was taken down and is coming back in stages. A group calling itself Hitcore claimed responsibility.
On 29 October about $6.3 billion left Binance hot wallets across ten blockchains. TRM Labs and Chainalysis attribute it to North Korea's TraderTraitor. Around $3 billion is frozen, Binance says it will cover losses.
CVE-2026-109618 and CVE-2026-109619 give remote code execution in PHP from version 5.4 onwards. Patches shipped on 21 October, details leaked a day early. A third flaw is still unpatched.
