INTELLIGENCE BRIEFS

Breach Brief — October 30, 2026

Vulnerability Brief — October 30, 2026

Anthropic-Themed Phishing Emails Slip Past Leading Secure Email Gateways

Binance Security Incident Freezes $3 B of Crypto Assets, $6.3 B at Risk

Critical Zero-Day Flaws in Leading Enterprise Firewalls Expose Networks to Remote Code Execution

Binance Probes Potential $5.8 Billion Crypto‑Theft Hack After Hot‑Wallet Transfers

Hugging Face Model Repositories Weaponized to Hijack GPU Servers for Crypto‑Mining

Amadeus Passenger Service System Breach Exposes 92,000 Japan Airlines Passengers

Polymarket Suspends Trading After Third‑Party Script Breach Drains $2.5 M in Crypto

Chinese Threat Actor Exploits PHP2Shell and Firewall Flaw to Compromise 24 U.S. Government‑Affiliated Firewalls

Fake Crypto Trading App on Apple Store Drains $23K from Solana Wallets

Zero‑Day Exploitation of Cisco SD‑WAN Authentication Bypass (CVE‑2026‑20127) Enables KeyDrift Malware Deployment

GM Pays $220 M to Settle Lawsuit Over Unauthorized Sale of Driver Location and Behavior Data

CISA Adds Two Known‑Exploited Vulnerabilities (CVE‑2026‑97229, CVE‑2026‑76418) to KEV Catalog

Chinese Hackers Exploit PHP2Shell Vulnerability in Palo Alto Networks Firewalls, Targeting Exposed Management Interfaces

Critical UEFI Firmware Buffer Overflow (CVE‑2026‑97631) Enables Pre‑Boot Code Execution

FCC Votes to End Recognition of Chinese Device Testing Labs by 2028, Shifting Supply‑Chain Assurance

Malicious Firefox Extensions Steal Crypto Wallet Recovery Phrases and Private Keys

Apple Issues Backported Fix for CoreGraphics Bug Affecting Older iPhone and iPad Models

Fake Anthropic AI Preview Phishing Campaign Targets Google & Microsoft Credentials