Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen
The Hacker News 30.10.2026 04:14
Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets.
The world's biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far.
Tether and Circle said they have frozen more than 1.567 billion USDT and 800 million related to the incident, respectively. The
New Cisco firewall zero-day being actively exploited
CSO Online 29.10.2026 19:31
A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) is under active exploitation to crash vulnerable devices.
The vulnerability, tracked as CVE-2026-76418 and rated 8.6 in severity, is due to logic errors when secondary authentication is configured on a tunnel group, Cisco said in its advisory. It could allow a remote, unauthenticated attacker to send a crafted request when connecting to the SSL remote access VPN that results in a device reload and thus denial of service.
Diverse kritische Schwachstellen in WatchGuard Fireware OS
Heise Security 29.10.2026 14:20
Schwere Sicherheitslücken gefährden Security-Appliances von WatchGuard. Updates stehen zur Verfügung und sollten schnell eingespielt werden.
Adobe schließt teilweise kritische Lücken in vier Produkten
Heise Security 29.10.2026 11:36
Mit einer Reihe Updates behebt Adobe Lücken, über die Angreifer Systeme kompromittieren könnten. Nutzer sollten zügig updaten.
Angriffsversuche auf junge Lücke in Oracle E-Business-Suite
Heise Security 29.10.2026 11:29
Oracle hat mit dem Oktober-CPU auch Lücken in der E-Business-Suite geschlossen. Nun sehen IT-Forscher erste Angriffsversuche.
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
The Hacker News 29.10.2026 10:44
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild.
The vulnerability, tracked as CVE-2026-76418, is rated 8.6 on the CVSS scoring system. Successful exploitation could allow an unauthenticated, remote attacker to cause the
PHP2Shell will persist in enterprise environments for years
CSO Online 29.10.2026 08:25
Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP integration into third-party products with patching cycles customers don’t control.
NAS devices, firewalls, VPN gateways, printers, building management panels, industrial IoT devices, and human-machine interfaces (HMIs) inside operational technology (OT) networks have web panels powered by PHP runtimes that cannot be patched directly. And many of these runtimes have unsupported versions for which upstream patches are not available.