This Week in Cybersecurity
Each week we recap the biggest cybersecurity news headlines from the week to keep you informed and ready to face the latest threats. Here’s your breakdown for the week of October 24th-30th, 2026.
Largest Crypto Heist on Record Drains $6.3 Billion From Binance Wallets
North Korea appears to have broken its own record. Binance puts the loss at roughly $6.3 billion, and TRM Labs tracked about $6.36 billion leaving its wallets across ten blockchains, most of it in about 20 minutes. TRM attributes the theft with high confidence to TraderTraitor, the unit the FBI blamed for the $1.5 billion Bybit heist in February 2025. Chainalysis agrees.
The entry point looks familiar too. Binance’s early findings point to a compromised DevOps engineer’s laptop that let the attacker into a service container to push unauthorized withdrawals. Bybit fell after a Safe developer’s machine was hijacked. Pyongyang keeps cashing in one engineer’s laptop at a time. About $3 billion is frozen, and Binance says it will cover every user loss.
Source: SecurityWeek
Read More
CISA Confirms Active Exploitation of Max-Severity GitLab RCE Flaw
GitLab’s CI/CD regex compiler keeps breaking, and attackers have noticed. CISA added CVE-2026-97229 to its Known Exploited Vulnerabilities catalog Thursday and gave federal agencies until Sunday to patch. The max-severity integer overflow lets an unauthenticated attacker run code on a GitLab server through a crafted regular expression in a pipeline config. Fixes landed earlier this month in versions 19.4.2, 19.3.5 and 19.2.8, and GitLab shipped threat detections for self-managed customers after spotting exploitation attempts.
Shadowserver counts nearly 2,800 internet-facing Community Edition instances. This is GitLab’s third max-severity fix of October and the second to land on KEV. A GitLab server holds source code, CI secrets and deploy tokens.
Source: BleepingComputer
Read More
Syrian Electronic Army Hacker Sentenced to 42 Months for 2013 AP Twitter Hijack
Thirteen years after a single fake tweet briefly erased $136 billion in Dow stock value, the hacker behind it is headed to prison. Ahmad Umar Agha, the Syrian Electronic Army member known as Th3Pr0, received 42 months for a campaign that hit about 47 media outlets, businesses, nonprofits and government bodies. The group’s playbook was basic phishing. Steal staff passwords, then deface sites, redirect traffic and hijack social accounts.
The 2013 AP Twitter takeover, falsely reporting Obama hurt in White House explosions, was the headline act. Agha later called the hack “a big victory for us.” Now the Justice Department says Assad’s inner circle, including the head of Syria’s General Intelligence Directorate, organized and led the group. The 2014 FBI affidavit and DOJ’s 2016 and 2018 announcements never said that.
Source: The Hacker News
Read More
About Applied Tech, An HBS Brand
Applied Tech is a leading IT and cybersecurity services provider dedicated to helping organizations protect their digital assets and scale their IT capabilities. Our proactive services span cloud management, security, productivity, and IT growth strategy—delivered by an experienced team with solutions built around your goals.
As part of Heartland Business Systems, we now bring greater resources, broader capabilities, and deeper technical expertise to every client relationship.
Get in Touch with Us
