Three citeable security samples from Time Signals

1. Bitget, a cryptocurrency exchange, suffered a multi-million dollar theft. The incident, reported on October 3, 2026, involved attackers exploiting third-party security products to steal $387 million from the exchange. The breach also involved North Korea, as reported in both English and Chinese versions of the timeline page. Evidence of the theft can be found at https://rekt.news/bitget-rekt and on X at https://x.com/TheBlockCo/status/2104585324362084504.

Additional information on the theft can be found at https://blocksec.com/blog/bitget-387m-off-chain-breach and https://www.chainalysis.com/blog/387m-bitget-theft-2026/.

2. The Technical University of Denmark (DTU) was targeted by attackers who gained access to its identity and access management system. The attackers downloaded a large amount of data, potentially exposing up to 200,000 users. The attack occurred on October 3, 2026, as evidenced by the timestamp on the BleepingComputer brief. The full report can be accessed at https://timeline.snamibo.com/en/briefs/febb6546f603e94a39df4d2991005671/.

3. A vulnerability in GoAnywhere MFT, a file management system, was exploited in a recent incident. The vulnerability, CVE-2025-10035, allowed for deserialization issues and possible command injection through forged license response signature forgery. The remediation text references vendor mitigations and BOD 22-01, with a due date of October 20, 2025.

The full incident report can be found at https://timeline.snamibo.com/en/incidents/e46990710227cb3ae67f463feb468a48/. Additional information on the vulnerability can be found on the CISA known exploited vulnerabilities catalog at https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035.