
FBI links $6.3 billion Binance crypto heist to North Korean hackers
The FBI confirmed TraderTraitor state-sponsored hackers stole $6.3 billion from Binance on or about October 29, 2026.
12 stories, newest first · one card per story

The FBI confirmed TraderTraitor state-sponsored hackers stole $6.3 billion from Binance on or about October 29, 2026.

ZachXBT says he infiltrated a Chinese syndicate laundering Bybit proceeds for North Korea’s Lazarus Group.

Investigator ZachXBT infiltrated a Chinese laundering syndicate processing $1B+ for Lazarus Group, enabling Tether freezes of stolen Bybit funds.
Bitget says hackers stole $387.5 million and its CEO links the theft to North Korean groups.

Bitget confirmed a $351.6 million theft from hot and warm wallets while cold storage stayed secure.

Microsoft patched CVE-2026-69836 (CVSS 10.0), a deserialization RCE in Entra ID; the flaw was fully mitigated service-side and was not exploited in the wild.

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

Researchers expose DPRK remote IT worker infiltration tactics, including forged identities and AI-assisted interview behavior.

Lazarus exploits Windows AFD.sys zero-day CVE-2026-68820 in Operation Dream Job to deploy Troy backdoor at defense firms.

Check Point links Lazarus Group's Operation Dream Job to a new Windows zero-day, CVE-2026-68820, targeting defense workers with fake Lockheed Martin job offers.

Microsoft patches 419 vulnerabilities in record-breaking Patch Tuesday; Windows Winsock zero-day CVE-2026-68820 is actively exploited by Lazarus Group.

CISA orders federal agencies to patch exploited Windows Winsock zero-day CVE-2026-68820 by August 25, used by Lazarus in Operation Dream Job.
Today 1.6K readers · 2.5K views · 777 reads · all time 189K views