News feed
The day's news across 8 spheres: duplicates merged, hype scored, signal kept. Every brief links to the outlets that did the actual reporting.
The briefs are written by an AI.
Lead · Security · 53 s read
The FBI says North Korea-linked actors stole $6.3 billion from Binance on October 29. Binance says it has replaced 90 percent of the stolen funds.
Merged from
Security
Cloud hosting platform Northflank warns customers to rotate all credentials and secrets after a breach led to unauthorized use of their AI API keys.
Security
A malicious build of Anthropic's Claude Code VS Code extension was served through Cursor's marketplace for roughly 11 to 12 hours. Reports say it could plant SSH backdoors.
Security
Blockchain analytics firm Chainalysis disclosed a data breach. Attackers used what it calls offensive agentic techniques to reach internal systems and tools.
Security
CISA says attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month. The sources give no details on affected versions or scale.
Security
Binance says about $6.3 billion in crypto was stolen and links the theft to a DevOps engineer's compromised laptop. Reports differ on the figure and on who is responsible.
Security
Cisco released updates for a denial-of-service zero-day in ASA and FTD software. Attackers are already using it to crash vulnerable firewalls remotely.
Most frequent topics over the last 30 days.
The stories in the news, explained in depth.
Analysis · Security
How CVE-2026-109618 and CVE-2026-109619 work, why a PHP version check misleads, what the four-day exploitation puzzle means, and how to test your servers.
Analysis · Security
An AI extension that reads your open tabs does it through one of three Chrome scopes. Here is what each one exposes, when it triggers a warning, and how to audit it before installing.
Analysis · AI
robots.txt only stops polite crawlers. Here is how user-agent rules, Web Bot Auth signatures, rate limits and login gates compare for AI agents, and what each one misses.
Analysis · Security
How to prove a Magento or Adobe Commerce store is patched, hunt for webshells and tampered templates, and roll out the BlockStrap fix without breaking the storefront.
Full disclosure
01 / Sweep
Five times a day the feed pulls headlines from newsrooms across eight spheres.
02 / Merge
The same story from ten outlets becomes one brief that names all ten.
03 / Brief
A summary, a hype score, and links to the people who did the reporting.