small tidbit ahead of this week: Anthropic is also standing up a midterms "war room" like OpenAI announced last week. "Ahead of the election, we have a dedicated warroom monitoring our platform for misuse and ready to quickly respond to any incidents" a spox told me

The FBI is releasing information advising the Democratic People's Republic of Korea (North Korea) was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange, Binance, on or about October 29, 2026. The FBI refers to this specific North activity as "TraderTraitor."

The FBI, together with partners at the USSS and IRS-CI, has observed TraderTraitor actors converting stolen assets primarily into Ethereum (ETH). It is expected these assets will then be further laundered by converting them using DeFi and instant swap services as they prepare them for further laundering stages.

How You Can Help:
FBI, USSS, and IRS-CI are urging private sector entities including THORNode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms, and other virtual asset service providers to block transactions with or derived from addresses TraderTraitor actors are using to launder these stolen assets.

A list of addresses associated with this activity is available here: fbi.gov/investigate/cy…

🚨 FBI says North Korea was behind Binance hack

Advisory here: fbi.gov/investigate/cy…

that record-breaking Binance hack? yeah, it's just part of North Korea's hacking playbook and automation was likely involved.

my latest on @axios:
axios.com/2026/10/31/nor…

Scoop: U.S. officials suspect Iran-linked hackers are tied to recent freezer malfunctions at military bases →
nextgov.com/cybersecurity/…

A message from Binance's Co-CEO, @_RichardTeng.

Investigation update: Our initial investigation suggested that the security incident may have involved a compromised laptop, however our subsequent investigation has uncovered additional points of breach.

This was a complex attack, and we are doing all we can in coordination resolve it. We are still gathering the facts, and will share more directly as we have them.

Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe.

We are still on track towards the expected timeline to resume the withdrawal service in 45 hours. Deposits remain unaffected.

The outflows ceased when we paused withdrawal service earlier. We are still working with partners to freeze many of the impacted assets, and have frozen around $3 billion thus far.

We will continue to provide further updates through official Binance channels as more verified information becomes available.

Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private a detailed technical post-mortem once the investigation is complete and the facts are fully verified.

The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.

As an immediate precaution, Binance has:

- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.

Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.

Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.

binance.com/en/support/ann…

Update: The current verified total frozen amount is around $3 billion.

Our teams continue to work closely with law enforcement, issuers, blockchain intelligence firms and industry partners to trace and freeze additional assets.

We will only share confirmed figures and will as more verified information becomes available. User funds are safe.

come on, guys- i logged off for an hour and came back to this?? 🫠

anyway, here's our story, hmu if you have tips or are part of incident response 🥰 axios.com/2026/10/29/bin…

Today, Corridor is joining Cognition! Together, we’ll be taking Devin Security to the next level.

We started Corridor almost two years ago with the mission of accelerating secure and autonomous software development. Since then, we’ve seen security go from a niche concern to one of the most pressing issues of our time.

We’re grateful to our team, our customers, our investors, and everyone who’s supported us along the way. We can’t wait to show you what we build next!

The University of New Mexico said it did not pay a ransom to unlock hospital and medical devices targeted by hackers on Monday

They also warned that the ransomware gang may reach out to patients, employees and students with threats

a week ago, everyone was freaking out about the internet going dark + doomsday.

today, we're all still here & the internet-wide meltdown everyone feared hasn't materialized.

welcome to the AI cybersecurity era — it's more nuanced than you'd probs expect.

more on @axios: axios.com/2026/10/28/cyb…

Louder for those in the back! @FEC ONLY handles campaign finance reports which list raising and spending. We play zero role in administering the election. We don’t receive, maintain, or come close to dealing with voter files, voting machines or voting.

important reminder: "The FEC does not ​play a role in administering US elections and the outage should have ‌no ⁠effect on voters' ability to cast ballots."

CISA added CVE-2026-109618 and CVE-2026-109619 to the Known Exploited Vulnerabilities list on Monday night

But the federal cyber defense agency implied in comments to @TheRecord_Media that the PHP2Shell bugs were added because of attempts instead of successful exploitation

SITUATION UPDATE: Following GMO Internet's refusal to pay a $50M ransom, the hackers behind the breach have promised to trigger ransomware covertly planted on customers' PCs via the cloud. GMO is urging users to unplug network cables, and power off their PCs before noon today.