{
  "id": 17194249,
  "title": "In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security",
  "url": "https://urgent.news/2026/10/30/in-the-year-ai-re-wrote-the-infosec-rulebook-its-comforting-to-know-17194249",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-30T04:22:12.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/10/30/in-the-year-ai-re-wrote-the-infosec-rulebook-its-comforting-to-know-crypto-exchanges-still-have-bad-security/5306539"
  },
  "original_language": "en",
  "account": "Cybersecurity experts have long worried about the security of cryptocurrency exchanges, and the recent incident at Binance serves as a stark reminder of their vulnerabilities. On Thursday evening, the exchange announced that it had discovered an unknown party had hacked into one of its workers' laptops and used it to carry out substantial trades. In a statement posted on its social media channels, Binance assured users that their funds were safe, but warned them to be cautious of scams and not to trust unofficial links or requests for personal information.\n\nIn the wake of the incident, Binance took swift action, freezing $2.5 billion worth of assets and warning that the figure could increase as it worked with law enforcement, issuers, and industry partners to trace and freeze additional assets. The company halted all trading, deposits, and withdrawals to prevent further damage and promised to cover any losses. After further investigation, Binance raised the estimated risk to $6.3 billion and reiterated its commitment to covering customer losses.\n\nThe update provided by Binance suggested that the security breach may have involved a compromised DevOps engineer's laptop, allowing the attacker to gain access to a service container and submit unauthorized withdrawal transactions. The company also found no evidence of any wallet private key leak, indicating that customers' holdings remained secure. However, it is unclear how the attackers gained access to the engineer's laptop, leading to speculation about potential phishing or supply chain attacks.\n\nCryptocurrency exchanges have a history of falling victim to cyberattacks, ranging from early incidents like the 2011 raid on Mt Gox to more recent cases allegedly carried out by nation-states. A recent incident possibly involving an AI-powered attacker added to the growing list of security concerns for these digital platforms. Binance has yet to disclose the full details of the attack, but it will provide further information once it has a clearer understanding of what happened.",
  "summary": "Binance freezes funny money after compromise of engineer’s laptop linked to $6.3 billion of unauthorized trades",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}