Cyber Threat Intel Daily Briefing — 2026-10-30

CYBER THREAT INTEL

DAILY BRIEFING · 2026-10-30 12:15 UTC · REPORT BRIEF-20261030-121503

OPEN // LE

01

Drupal Commerce Core Vulnerability Exploited Against Online Stores

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores  appeared first on SecurityWeek.

SRC: SecurityWeek Fri, 30 Oct 2026 11:07:11 +0000 https://www.securityweek.com/drupal-commerce-core-vulnerability-exploited-against-online-stores/

02

Drupal warns of critical Commerce Core flaw exploited in attacks

Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. […]

SRC: BleepingComputer Fri, 30 Oct 2026 06:16:07 -0400 https://www.bleepingcomputer.com/news/security/drupal-warns-of-critical-commerce-core-flaw-exploited-in-attacks/

03

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek.

SRC: SecurityWeek Fri, 30 Oct 2026 09:32:27 +0000 https://www.securityweek.com/max-severity-gitlab-vulnerability-exploited-against-alpine-linux/

04

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines

An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek.

SRC: SecurityWeek Fri, 30 Oct 2026 08:44:49 +0000 https://www.securityweek.com/teamviewer-flaw-could-let-malicious-hosts-take-over-support-technicians-machines/

05

As Russia's Cyberwar Evolves, Belarus Steps Forward

The "FrostyNeighbor" advanced persistent threat (APT) launched a destructive attack in Ukraine and is raising concerns about deeper alignment with Russian cyber objectives.

SRC: DarkReading Fri, 30 Oct 2026 08:00:00 GMT https://www.darkreading.com/physical-security/russia-cyber-war-belarus-steps-forward

06

Binance links $6.3 billion crypto theft to compromised DevOps laptop

Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop. […]

SRC: BleepingComputer Fri, 30 Oct 2026 05:18:13 -0400 https://www.bleepingcomputer.com/news/security/binance-links-63-billion-crypto-theft-to-compromised-devops-laptop/

07

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop. The post $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor appeared first on SecurityWeek.

SRC: SecurityWeek Fri, 30 Oct 2026 08:16:26 +0000 https://www.securityweek.com/6-billion-binance-hack-bears-hallmarks-of-north-koreas-tradertraitor/

08

US Probes Suspected Hack Behind Military Base Freezer Failures

The Pentagon treats August freezer failures at US military bases as a suspected hack and is working with French investigators after a supermarket attack. The Pentagon is investigating freezer failures that spoiled food at US military bases in August as a suspected cyberattack, according to four offi

SRC: Security Affairs Thu, 29 Oct 2026 21:58:38 +0000 https://securityaffairs.com/202073/hacking/us-probes-suspected-hack-behind-military-base-freezer-failures.html

09

Hacker leaks data on more than 40,000 Homeland Security employees

A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U.S. Department of Homeland Security (DHS) employees are now online after a hacker stole reams of data in a data breach that occurred earli

SRC: Security Affairs Fri, 30 Oct 2026 06:26:27 +0000 https://securityaffairs.com/202103/data-breach/hacker-leaks-data-on-more-than-40000-homeland-security-employees.html

10

Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen

Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6.3 billion worth of assets. The world's biggest cryptocurrency exchange said nearly $3 billion of those assets have been frozen on-chain so far.  Tether and Circle said they have frozen mo

SRC: The Hacker News Fri, 30 Oct 2026 09:44:59 +0530 https://thehackernews.com/2026/10/binance-suffers-security-breach.html

11

Binance probes potential $5.8 billion crypto-theft hack

Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. […]

SRC: BleepingComputer Thu, 29 Oct 2026 18:45:23 -0400 https://www.bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-theft-hack/

12

Japan Airlines suffers third-party data breach exposing passenger info

Japan Airlines (JAL) has announced that a data breach at Amadeus's Passenger Service System exposed the data of about 92,000 customers. […]

SRC: BleepingComputer Thu, 29 Oct 2026 18:08:04 -0400 https://www.bleepingcomputer.com/news/security/japan-airlines-suffers-third-party-data-breach-exposing-passenger-info/

13

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek.

SRC: SecurityWeek Fri, 30 Oct 2026 09:41:36 +0000 https://www.securityweek.com/2-million-drained-from-polymarket-traders-in-new-supply-chain-attack/

14

Microsoft finally fixes VPN issues caused by September updates

Microsoft has resolved Always On VPN connection failures triggered after installing the September 2026 Windows 11 security updates. […]

SRC: BleepingComputer Fri, 30 Oct 2026 07:20:26 -0400 https://www.bleepingcomputer.com/news/microsoft/microsoft-finally-fixes-vpn-issues-caused-by-september-updates/

15

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts. The issue has since been traced to the compromise of the Cursor Marketplace, prompting the AI coding platform C

SRC: The Hacker News Fri, 30 Oct 2026 14:25:47 +0530 https://thehackernews.com/2026/10/official-claude-code-vs-code-extension.html

16

Anthropic-Themed Phishing Emails Bypass Top Security Tools

Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.

SRC: DarkReading Thu, 29 Oct 2026 21:21:56 GMT https://www.darkreading.com/cyberattacks-data-breaches/anthropic-phishing-emails-bypass-security-tools

17

OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut

OpenAI says it won't reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots usage independent. […]

SRC: BleepingComputer Thu, 29 Oct 2026 19:35:52 -0400 https://www.bleepingcomputer.com/news/artificial-intelligence/openai-doubles-chatgpt-pro-usage-limits-after-backlash-over-planned-50-percent-cut/

[ SOURCE ] OpenPhish (18 indicator(s))