LiteLLM 1.107.0 Credential Harvesting AttackA key accidentally exposed in May enabled attackers to inject a malicious LiteLLM package (v1.107.0) that harvests credentials and runs on any Python startup. The attack is believed to have hit tens o5h ago · 2 min read404-founders.com
Binance Hack: How Most of $6.36 Billion Left in 20 MinutesOn the evening of 29 October 2026, addresses controlled by a single attacker started receiving money from Binance wallets on ten blockchains. TRM Labs estimates the Binance hack at about USD 6.36 bill5h ago · 5 min read404-founders.com
Drupal Commerce CVE-2026-118539: Exploited Access BypassAnonymous visitors can reach parts of a Drupal Commerce store they should never touch, and Drupal says attackers are already doing it. The fix for Drupal Commerce CVE-2026-118539 came out on 28 Octobe5h ago · 9 min read404-founders.com
Aoki Infostealer Steals Claude, Codex and Cursor TokensThe Aoki infostealer, also tracked as Aokigahara, has added AI coding assistant credentials to its shopping list. It takes the login and session files of Claude Code, OpenAI Codex, Cursor, GitHub Copi5h ago · 10 min read404-founders.com
Binance $6.3B Crypto TheftA North Korea-linked hacking group, TraderTraitor, stole roughly $6.3 billion in cryptocurrency from Binance, the largest theft in the industry's history. Binance has frozen about $3 billion on-chain,5h ago · 2 min read404-founders.com
