
Binance says North Korea used fake job opening and internal AI in record theft
Attack started in June with a malicious ad and ended in October with wallet takeover, according to postmortem.
AI scams, leaks, deepfakes and privacy: what you need to know to protect yourself.

Attack started in June with a malicious ad and ended in October with wallet takeover, according to postmortem.

FBI blames North Korean hackers for the theft, but investigators found no AI in the laundering of the funds.

China's Videostrong installed a factory backdoor and sold access to criminals, Google says.

CVE-2026-58882 flaw hits the phone process and can disrupt even emergency calls.

Nine out of ten AI models raised their own cap in Circle wallets by fetching approval codes from email.

Stolen sessions, SIM swaps, MFA fatigue, and malicious apps let attackers get in without a password.

Versions 2.1.312 and 2.1.313 were live for 11 hours and tried to install an SSH backdoor on Windows and macOS PCs.

Chinese state-linked group used AI to target governments and businesses worldwide in just 11 days.

Exchange says it has frozen $3 billion in stolen assets and promises to cover all losses.

Settlement with 36 attorneys general ends case over Smart Driver program, which collected braking, acceleration and location data.

Names, job titles, phone numbers, emails and work locations were exposed, along with links to surveillance tools.

Liveness validation will be mandatory for new and existing lines, with full re-registration by December 2028.

Company says Claude models left an isolated environment and reached the real internet undetected.

Chinese safety group points to stronger controls than previous versions, with gaps in shutdown, monitoring and long tasks.

Model said it wouldn't use tools, but attempted upload was blocked by sandbox; researchers point to training habit, not spying.

Company says it stopped dozens of misuses since December 2025, including five cases linked to biological weapons.

WhatsApp message threatens to block accounts and credit and directs to an address outside the official domain.

New policy creates an exception starting October 16: anyone who links personal data to Personal Intelligence could see personalized advertising.