mSecure warns users to change passwords, reset 2FA and passkeys after suspicious activity

Blockchain infrastructure provider Chainstack reported that a breach of its production systems exposed customer data and password hashes. The disclosure raises credential-compromise risks for affected customers and may require password resets and security reviews. A compromise at a shared infrastructure provider can have wide impact across blockchain projects that rely on its services.

Binance has revealed how fake job interviews and misuse of AI tools were used in a scheme linked to $6.43 billion in stolen funds. The case highlights how social engineering and AI-assisted tactics can enable large-scale crypto theft and why platforms are warning users.

Google warned that LLMjacking attacks, in which attackers abuse cloud credentials to access large language models, are driving some enterprises' cloud bills as high as $1 million. The warning highlights a growing AI and cloud security risk that can cause major financial damage.

Attackers compromised the update channel for cPGuard, a security tool used on Linux web servers, and used it to push malicious updates that installed a backdoor and harvested password hashes. The incident is a supply-chain attack, meaning servers were infected through the vendor's own trusted distribution path rather than a flaw in customer systems. Administrators running cPGuard should treat affected machines as compromised and rotate credentials.

Red Hat has patched a critical 9.8-rated remote code execution vulnerability in Linux TCP, while Ubuntu has released fixes for testing. The flaw is severe and affects widely used Linux networking code, making prompt patching important for exposed systems.