WaperThe FBI attributed the Binance crypto theft to North Korea-linked TraderTraitor, while a hijacked third-party script cost Polymarket traders about $2.7 million.
Cybersecurity5 items
Alpine Linux rebuilt its GitLab server after an attempted exploit, and newly detailed vulnerabilities affect Canonical infrastructure and Android phones.
New4
Hijacked DebugBear script steals about $2.7 million from Polymarket traders
Malicious code replacing a third-party page-speed script sold signed-in Polymarket traders' positions and transferred funds to attackers on October 29. Polymarket says it is refunding about $2.7 million to 726 affected wallets.
Why it matters: The theft demonstrates how a compromised website dependency can turn authenticated trading sessions into direct financial losses.
Alpine Linux rebuilds GitLab server after attempted remote code execution
Attackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20–21. The project rebuilt its GitLab server and reset all passwords over concerns of a possible compromise.
Why it matters: The incident puts open-source development infrastructure at risk, although a successful compromise has not been confirmed.
Critical LXD and MicroCloud flaw permits trusted-client impersonation
A CVSS 10.0 flaw in Canonical's LXD and MicroCloud allowed attackers to impersonate trusted clients without their private keys. Exploitation required network access to the HTTPS API and the trusted client's public certificate, granting that client's access to clusters and virtual machines.
Why it matters: Exposed management APIs could allow unauthorized access to virtual infrastructure despite client-certificate authentication.
Android proof-of-concept exploit crashes unpatched phones through crafted text messages
A researcher released a proof-of-concept exploit for the recently patched Android vulnerability CVE-2026-58882, dubbed "SMS of Death." A specially crafted text message can remotely disrupt cellular service or crash unpatched phones.
Why it matters: Public exploit code increases the urgency of deploying the available fix to protect mobile availability.
Follow-ups1
FBI attributes $6.43 billion Binance theft to North Korea-linked TraderTraitor
The FBI officially attributed the theft of more than $6 billion in virtual assets from Binance to TraderTraitor, a North Korea-aligned hacking group. The attribution was announced alongside the U.S. Secret Service and IRS Criminal Investigation.
Why it matters: The official attribution adds a named state-linked actor to the previously reported theft, sharpening the threat picture for cryptocurrency businesses.