The FBI has attributed the $6 billion Binance cryptocurrency heist to North Korea’s state-sponsored hacking group TraderTraitor. The attackers compromised Binance’s infrastructure, including multiple breach points beyond an initially suspected compromised laptop, and rapidly emptied hot wallets across multiple blockchains. The stolen funds are being laundered primarily into Ethereum and then through decentralized finance (DeFi) and instant swap services. The FBI has identified over 600 cryptocurrency addresses linked to the theft and is coordinating with industry partners to block transactions from these addresses. Binance has pledged to cover all losses and has already replaced about 95% of the stolen funds using company resources. The laundering activity appears to be highly automated, with continuous fund movements across numerous addresses and chains.
CVE-2026-107457 is a low-severity memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. It occurs under certain MQTT 5 connection settings between client and server and may cause application crashes due to out-of-bounds writes.
Ivanti released patches for two additional zero-day vulnerabilities, CVE-2026-111357 and CVE-2026-118527, in its Connect Secure VPN product. These flaws were exploited in combination with a previously disclosed authentication bypass (CVE-2026-104935) in targeted attacks. The vulnerabilities affect versions 25.1.1.2 and earlier, and 22.8R2.5 and earlier, with fixes available in versions 25.1.1.3 and 22.8R2.6. The chained exploitation allowed attackers to achieve unauthenticated root-level code execution on fully patched ICS appliances, primarily for credential theft and data exfiltration. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added these vulnerabilities to its Known Exploited Vulnerabilities catalog and mandated federal agencies to patch promptly.
The scdn-jquery npm package version 0.1.6 contains obfuscated malicious code in the file libs/18.2.0.js. This code loads a remote script that inserts an invisible iframe to deliver iOS-specific exploit code based on the visitor's device version. The malicious loader executes in the browser when the script is served, masquerading as jQuery. There is no evidence of malicious code execution during npm installation.
CVE-2026-18199 is a high-severity vulnerability in Zohocorp ManageEngine Password Manager Pro and PAM360 that allows authenticated users to execute arbitrary OS commands remotely. The flaw exists in versions prior to 13236 for Password Manager Pro and prior to 8601 for PAM360. This vulnerability is classified as CWE-78, indicating OS command injection. It has a CVSS v3.1 score of 8.8, reflecting its critical impact on confidentiality, integrity, and availability.
CVE-2026-101184 is a permission control vulnerability in the Bluetooth module of Huawei HarmonyOS. Exploitation of this flaw may impact system availability but does not affect confidentiality or integrity. The vulnerability affects multiple specific versions of HarmonyOS. The CVSS score is 5.5, indicating a medium severity level.
CVE-2026-101178 is a permission control vulnerability in the autofill service module of Huawei HarmonyOS. Exploitation may lead to unauthorized exposure of sensitive information, impacting service confidentiality. The vulnerability affects multiple specific versions of HarmonyOS. The CVSS score is 6.6, indicating a medium severity level.
The PayHere Payment Gateway WordPress plugin versions 2.4.0 through 2.4.5 have a vulnerability where payment notifications are not verified for authenticity if the merchant secret is unset, which is the default configuration. This allows unauthenticated attackers to forge payment confirmations and mark orders as paid without actual payment.
CVE-2026-101177 is a permission control vulnerability in the Optimizer module of Huawei HarmonyOS. Exploiting this flaw may impact service confidentiality. The vulnerability affects multiple specific versions of HarmonyOS. The CVSS score is 3.7, indicating a low severity level. There is no evidence of known exploits in the wild, and no patch or remediation information is provided.
CVE-2026-101174 is a denial-of-service (DoS) vulnerability in the DSoftBus module of Huawei HarmonyOS versions 6.1.0 and 7.0.0. Exploitation of this vulnerability can lead to uncontrolled resource consumption, impacting system availability. The vulnerability has a medium severity rating with a CVSS score of 5.7. No public exploits or patches are currently documented.
CVE-2026-101173 is a denial-of-service (DoS) vulnerability in the DSoftBus module of Huawei HarmonyOS. Exploitation of this vulnerability can lead to resource exhaustion, impacting system availability. The vulnerability affects HarmonyOS versions 6.1.0 and 7.0.0. The CVSS 3.1 base score is 6.5, indicating a medium severity level.
CVE-2026-101176 is a permission control vulnerability in the event notification management module of Huawei HarmonyOS. Exploiting this flaw may impact service confidentiality and cause high integrity and availability issues. The vulnerability affects multiple specific versions of HarmonyOS. The CVSS score is 7.1, indicating a high severity level.
CVE-2026-101186 is a denial-of-service (DoS) vulnerability in the window module of Huawei HarmonyOS version 6.1.0. Exploiting this flaw can disrupt system availability but does not impact confidentiality or integrity.
CVE-2026-101185 is a buffer access vulnerability in Huawei HarmonyOS version 6.1.0, specifically an out-of-bounds read in the peripheral module. Exploiting this flaw could lead to unauthorized disclosure of information, impacting service confidentiality. The vulnerability has a medium severity rating with a CVSS score of 5.9. No public exploits or patches are currently documented.
CVE-2026-101183 is a use-after-free (UAF) vulnerability in the location service module of Huawei HarmonyOS versions 6.1.0 and 7.0.0. Exploitation of this flaw may impact system availability. The vulnerability has a medium severity rating with a CVSS score of 5.9. No public exploits or patches are currently documented.
CVE-2026-101182 is a race condition vulnerability in the location service module of Huawei HarmonyOS version 6.1.0. Exploitation may impact system availability, causing potential denial of service. The vulnerability has a medium severity rating with a CVSS score of 5.9. No public exploits or patches are currently documented.
CVE-2026-101181 is a permission control vulnerability in the WLAN module of Huawei HarmonyOS versions 6.1.0 and 7.0.0. Exploiting this flaw may lead to unauthorized exposure of sensitive information, impacting service confidentiality. The vulnerability has a medium severity rating with a CVSS score of 5.5. No public exploits or patches are currently documented.
CVE-2026-101180 is a denial-of-service (DoS) vulnerability in Huawei HarmonyOS affecting the file parsing module. The flaw is due to uncontrolled recursion, which can lead to resource exhaustion and impact system availability. The vulnerability affects specific versions 6.1.0 and 7.0.0 of HarmonyOS. The CVSS score is 4.3, indicating a medium severity level. There is no evidence of exploitation in the wild, and no patch or remediation information is currently provided.
CVE-2026-101179 is a buffer overflow vulnerability in the file preview module of Huawei HarmonyOS versions 6.1.0 and 7.0.0. Exploitation may impact system availability but does not affect confidentiality or integrity. The vulnerability has a medium severity rating with a CVSS score of 4.7.
A high-severity security vulnerability (CVE-2026-120341) has been identified in the mathurvishal CloudClassroom-PHP-Project, specifically involving an unknown function in the studentdetails.php file. The vulnerability allows remote attackers to manipulate execution flow after a redirect, potentially leading to unauthorized code execution. The vulnerability has been publicly disclosed, and exploit code may be available. The vendor has not responded to disclosure attempts, and no version-specific affected or fixed releases have been provided due to the product's rolling release model.