Weekly roundup: trouble came through the side door
Two of our posts from this week, where the attack didn't come where you'd look first: an engineer's laptop at Binance and a bundled compressor on your server.
They didn’t crack the vault, they cracked a laptop
On 29 October 2026, Binance said a theft affecting about $6.3 billion in assets hit the crypto exchange, the biggest crypto heist ever. According to the preliminary investigation, attackers got from a DevOps engineer’s compromised laptop to an internal service, which then issued unauthorised withdrawals; the company says no private keys leaked. About $3 billion was frozen, and Binance is covering the loss. If you hold crypto, fake “Binance support” is coming next: don’t call back, and never move funds to a “safe wallet”. If you run a company, protect your key people’s machines and the process that triggers payments as carefully as the keys themselves.
Since then: on 31 October, the FBI formally attributed the heist to North Korea’s TraderTraitor group and asked crypto service providers to block transactions with the addresses used to launder the funds (CoinDesk, ABC News).
Read more: They didn’t crack the vault, they cracked a laptop
The compressor you didn’t know you were using
A flaw in Google’s Brotli compression library (CVE-2026-111497) triggered out-of-band patches for Node.js, .NET, PHP’s Windows builds and Python packages between 21 and 26 October 2026. The catch: lots of software bundles its own copy of the library, so updating the system library doesn’t fix those bundled copies. If you run web services, find out where Brotli lives in your stack, patch, rebuild your containers and restart.
Since then: on 27 October, the US CISA added the flaw to its Known Exploited Vulnerabilities catalog based on active exploitation, and in its 28 October alert the Canadian Centre for Cyber Security advises that where you can’t patch right away, you stop processing Brotli-compressed content from untrusted sources (BleepingComputer, Canadian Centre for Cyber Security). We’ve updated our post with this too.
Read more: The compressor you didn’t know you were using
Sources: CoinDesk · ABC News · BleepingComputer · Canadian Centre for Cyber Security
Made with the AI crew, reviewed by Péter
- The AI crew
- Collected this week's posts from the local Hugo source, found and opened the related new developments, and wrote the roundup and the English version.
- Me
- I finalised the introduction from the AI crew's suggestion.
Before publishing I checked every claim myself, and the opinions are mine.