The FBI says North Korean hackers stole a record $6.43 billion from Binance. The same weekly roundup lists dozens of software flaws to patch.
The FBI says North Korea is behind the largest crypto theft on record. It blames a hacking group called TraderTraitor for taking $6.43 billion in digital assets from Binance. The news comes from a weekly security roundup that also lists dozens of newly found software flaws.
The theft beats the $1.46 billion taken from Bybit in February 2025, the previous record. The money was stolen across 11 blockchains, which are the public ledgers that track digital coins. Of the total, 82% was on Ethereum and Bitcoin. Tether, Circle, Ripple, Arbitrum and Optimism have frozen $2.85 billion of the stolen funds.
The roundup also names flaws in Chrome, Firefox, TeamViewer, Okta, Drupal, Apache tools, WatchGuard, Juniper, Veeam, ASUS and TightVNC. Some are high-severity, widely used, or already being attacked. Several of the week's attacks needed little trickery: a fake support call, a trusted extension, a shared link, or a device with no password.
The steps in the alert box above cover the basics. Updating browsers and remote access tools is the quickest win, and a business should hand the longer list to its IT provider.
Some things are not yet clear. The roundup does not say how the theft happened or what it means for Binance customers. It also does not say which of the listed flaws are being used in attacks right now. Anyone who uses none of the named products is not directly singled out, but the password and fake call advice applies to everyone.
Update your browser and remote access tools today, and put a password on every device you own.
The Attala County Sheriff's Office in Mississippi says scam calls are reaching residents, and a call that sounds official may not be.
Read more: Mississippi sheriff warns residents about scam phone callsScammers are posing as Texas sheriff's officers and claiming you missed jury duty. Caller ID can show a real police number even when the call is fake.
Read more: Fake jury duty calls spoof a real Texas sheriff's phone numberFake PayPal emails and texts, some posing as a security report, try to get you to tap a link and type your login. Checking your account directly avoids the trap.
Read more: Got a fake PayPal message? Skip its link and check your account yourself
