Weekly Security Roundup: Binance’s $6.4B Theft, CrowdStrike Acquisitions and Malicious Claude Code Builds
Summary
This week’s roundup covers Binance’s reported $6.4B theft, CrowdStrike’s AI-security acquisitions, malicious Claude Code builds, stolen AI credentials, active exploits, and incidents affecting developer platforms and crypto users.
Key points
- Binance’s preliminary account says attackers used a tampered installer and fake job interviews to target engineers, then abused credentials and a deployment token to move funds through its signing service. The FBI attributes the theft to North Korea’s TraderTraitor; Binance said 98% of affected token assets had been replenished by Nov. 3.
- CrowdStrike announced its acquisitions of Fiddler AI and Dreadnode, reportedly totaling about $495 million, alongside new AI red-teaming, browser security, and cloud protection offerings.
- Malicious Claude Code builds distributed through Cursor’s marketplace for about 11 hours added an SSH key and persistence on affected systems. Cursor published remediation scripts; credential rotation is a separate recovery step.
- Wiz counted 11 developer-platform incident disclosures in October involving stolen AI credentials. Google reported victims billed up to $1 million as stolen access was resold through LLM services.
- CrowdStrike observed VAPOR PANDA’s ARTEX campaign targeting more than 200 organizations across 14+ countries; it reported confirmed post-exploitation at nine. Other companies separately described AI-assisted attacks.
- CISA added GitLab’s CI/CD regex compiler flaw and a WordPress upgrade-window RCE to its Known Exploited Vulnerabilities catalog. Ivanti also fixed two additional exploited VPN flaws.
- Attackers hijacked the cPGuard update channel to distribute a credential-stealing script; OpsShield told BleepingComputer that 2,946 servers were affected, and credentials taken from affected servers remain exposed after updating.
Article Details
- Event Type
- Cybersecurity news roundup covering a major cryptocurrency theft, malicious software distribution, AI credential theft, data breaches, and actively exploited vulnerabilities.
- Impact
- Attackers stole approximately $6.4 billion from Binance, compromised developer credentials and systems, and exposed data and secrets across multiple organizations. Additional incidents included malicious Claude Code builds that planted SSH keys and persistence, and exploited vulnerabilities enabling code execution or server compromise. The article reports that some stolen funds were frozen or seized, while remediation and investigations were ongoing.
CVE
CVE-2026-111357Ivanti · Connect securezero-days in the chain UTA0576 used to get unauthenticated root on fully patched VPN appliances: CVE-2026-111357 (privilege escalation) and CVE-2026-118527 (file upload to a predictable path).CVE-2026-118527Vendor / Product unavailableget unauthenticated root on fully patched VPN appliances: CVE-2026-111357 (privilege escalation) and CVE-2026-118527 (file upload to a predictable path).CVE-2026-119977WordPress Foundation · WordPressWordPress core’s upgrade-window RCE lands in KEV (CVE-2026-119977)CVE-2026-40217Litellm · Litellmshops. Google’s Nov 2 report describes access resold through “LLM mixers” and flags a LiteLLM RCE (CVE-2026-40217) used to steal keys.CVE-2026-97229GitLab · GitLabMax-severity GitLab flaw is now exploited (CVE-2026-97229)
People
Jake CooperRailway CEO who apologized for the agent's external testing and banned non-manual external testing.Jake RunzerRailway engineer who confirmed that his signup-testing agent probed Primcloud's internal network.Josh MandersPrimcloud founder who described the activity and reported that the agent's actions were blocked.Michael GrinichWorkOS founder who identified ARTEX as the tool involved in the breach of an internal sales application.
Threat Actors
Jade SleetThe FBI attributes the Binance theft to North Korea’s TraderTraitor; the article presents this as an attribution, not an independently confirmed finding.UTA0576Identified in the article as the actor that used an exploit chain to obtain unauthenticated root access on Ivanti VPN appliances.VAPOR PANDACrowdStrike observed VAPOR PANDA conducting a human-directed ARTEX campaign against more than 200 organizations, with post-exploitation confirmed at nine.
Malware
AokiCommodity infostealers WardenStealer and Aoki now grab OAuth tokens, API keys, configs and session cookies from Claude Code, Codex, Cursor, GitHub Copilot and the Claude and ChatGPT desktop apps, per SpyCloud’s Oct 30WardenStealerCommodity infostealers WardenStealer and Aoki now grab OAuth tokens, API keys, configs and session cookies from Claude Code, Codex, Cursor, GitHub Copilot and the Claude and ChatGPT desktop apps, per SpyCloud’s Oct 30
Vendors
AnthropicFor about 11 hours on Oct 29, Cursor’s marketplace distributed malicious Claude Code extensions that Anthropic didn’t make. Uninstalling them doesn’t remove everything they planted. On macOS and Windows, the payloadBinance💸 Binance lost about $6.4B without losing a single private key.CrowdStrikeThis week’s a heavy one: the largest crypto theft on record, CrowdStrike shopping spree, and fake Claude Code builds planting SSH keys.Cursor🧩 Malicious Claude Code builds 2.1.312 and 2.1.313 reached Cursor’s marketplace on Oct 29.GitLabMax-severity GitLab flaw is now exploited (CVE-2026-97229)IvantiIvanti fixes two more exploited VPN flaws missed by its Oct 13 patchesNvidia🔑 Northflank, Trigger.dev and NVIDIA Brev disclosed incidents as attackers keep raiding AI developer platforms for stored keys.OpenAI🔓 OpenAI says personal Daybreak Blue sessions can be used for training starting Nov 29, even with the training setting off.OPSSHIELDAttackers used stolen credentials to get into OpsShield’s update CDN and, starting 8:06 p.m.WordPressWordPress core’s upgrade-window RCE lands in KEV (CVE-2026-119977)
Products
Brev🔑 Northflank, Trigger.dev and NVIDIA Brev disclosed incidents as attackers keep raiding AI developer platforms for stored keys.Claude CodeThis week’s a heavy one: the largest crypto theft on record, CrowdStrike shopping spree, and fake Claude Code builds planting SSH keys.cPGuardcPGuard’s auto-update gets hijacked to steal server credentialsDaybreak Blue🔓 OpenAI says personal Daybreak Blue sessions can be used for training starting Nov 29, even with the training setting off.FalconThe buys: Fiddler AI (agent monitoring, becomes Falcon Observe) and Dreadnode (offensive testing of AI apps). WSJ reports about $400M and $95M; CrowdStrike hasn’t disclosed terms.PolymarketA hijacked monitoring script drained logged-in Polymarket tradersWordPressWordPress core’s upgrade-window RCE lands in KEV (CVE-2026-119977)
Tools
Countries
Industries
Cloud ComputingAlso, A Security Field Guide to AI Audit Trails hit #1 in Cloud Computing (and #4 in computer security) new releases on Amazon! Huge thank you to everyone who picked up a copy. If you’ve read it, a quick review goes aCybersecurityWelcome to The Cybersecurity Pulse (TCP)! I’m Darwin Salazar, Head of Growth at Monad and former detection engineer at Datadog. Each week, I bring you the latest security innovation and industry news. Subscribe to