2026-10-30 Daily Cyber News
A potential multibillion-dollar crypto theft has frozen withdrawals and put customer trust under immediate pressure. Meanwhile, actively exploited PHP weaknesses are being chained to gain root access, and compromised network controllers show why management systems have become strategic targets. Today’s issue also tracks healthcare disruption, attacks against Oracle business systems, a third-party script breach, and abuse of GitHub automation. Daily Cyber filters fast-moving claims, separates confirmed facts from…
- Incident ResponseBinance freezes withdrawals as potential multibillion-dollar theft unfolds
Withdrawals on multiple networks were temporarily suspended after Binance confirmed a security incident and reports of funds leaving its wallets. The exchange said customer funds were safe and that it was investigating. External estimates placed the potential loss between at least $2 billion and as much…
- Vulnerabilities & ExploitsExposed PHP systems face active attacks that can end in root access
Internet-exposed PHP systems face active exploitation of two critical weaknesses collectively called PHP2Shell. Telemetry identified over 22.6 million exposed instances potentially vulnerable, while separate monitoring recorded successful exploitation. Attackers have chained PHP2Shell with a Linux…
- Vulnerabilities & ExploitsNetwork controllers targeted for keys and long-term strategic access
Attackers exploited Cisco SD-WAN controllers to gain privileged access and deploy malware built for persistence and key theft. The KeyDrift framework operated inside legitimate control-plane processes, intercepted decrypted traffic and collected material believed to protect data-plane communications. The…
- Identity & AccessHospital cyberattack diverts ambulances and cancels surgeries
Patient care was disrupted after a cyberattack affected the University of New Mexico Health Sciences Center and its hospitals and clinics. Ambulances were diverted for a time, outpatient surgeries and appointments were suspended, and medical classes were cancelled. A ransomware group claimed…
- Vulnerabilities & ExploitsOracle business systems face attacks after critical fix arrives
Oracle E-Business Suite systems are facing exploitation attempts shortly after an October security fix became available. The affected component can let an unauthenticated attacker run database queries and execute commands on the application host. Depending on the deployment, exposed records may include…
- ComplianceThird-party script breach drains funds and halts Polymarket trading
Polymarket temporarily halted trading after a compromised third-party service distributed cryptocurrency-draining JavaScript through its website. The malicious script used authenticated sessions to liquidate positions or transfer user assets. Approximately $2.5 million was traced through a suspected…
- Supply Chain & Third PartyGitHub automation abuse targets secrets across 61 public projects
A coordinated campaign targeted automation workflows across 61 public GitHub repositories, including widely used development and security projects. Attackers placed hidden commands inside issues, pull requests or comments so vulnerable workflows would execute them automatically. Researchers identified 83…