{
  "id": 19834494,
  "title": "How North Korean hackers turned Binance's own internal AI into a weapon in $6.3b heist - interview",
  "url": "https://urgent.news/2026/11/13/how-north-korean-hackers-turned-binances-own-internal-ai-into-a",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-13T16:52:51.000Z",
  "source": {
    "name": "Jerusalem Post Tech & Start-Ups",
    "slug": "jerusalem-post-tech-start-ups",
    "url": "https://www.jpost.com/business-and-innovation/tech-and-start-ups/article-914823"
  },
  "original_language": "en",
  "account": "Two weeks after a massive $6.3 billion cyberattack on cryptocurrency exchange Binance, internal investigations revealed the key role of Binance's own AI tools in the heist. According to cyber expert Ori Segal, the attack utilized one of Binance's internal AI models to compromise two engineers' computers, marking the first large-scale incident where a company's AI tools were weaponized by hackers. Segal, CEO of Cybore, explained that the attack also involved a poisoned package manager, a fake recruiter, a malicious file, credential reuse, and an overly broad deployment permission, yet none of these steps required AI. While most cybersecurity experts have focused on AI's potential in recent years, this incident highlights the need to also address the risks associated with the AI tools companies use internally. Segal emphasized that companies currently lack clear guidance on how to prevent these attacks and recommended stopping the pressure for results, checking whether tasks need to be performed on specific devices, and avoiding the use of unvetted third-party code on work computers. Additionally, he pointed out that the job interview lure used to target the engineers is itself a significant vulnerability, as it puts employees in a position where revealing they are job hunting could lead to punishment for reporting the attack.",
  "summary": "A cyber expert says Binance's own AI tools became part of a $6.3 billion hack, exposing risks from fake interviews and workplace AI security failures.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 3,
    "also_reported_by": [
      {
        "outlet": "Techmeme",
        "title": "The FBI says North Korean hackers stole $400M+ in crypto in the last 18 months using \"FaceStealer\", a scheme involving fake video calls and AI deepfakes (A.J. Vicens/Reuters)",
        "url": "https://urgent.news/2026/11/12/the-fbi-says-north-korean-hackers-stole-400m-in-crypto-in-the-last-18",
        "published": "2026-11-12T23:35:01.000Z"
      },
      {
        "outlet": "Daily Times",
        "title": "North Korean hackers steal $400m through fake AI video calls",
        "url": "https://urgent.news/2026/11/13/north-korean-hackers-steal-400m-through-fake-ai-video-calls",
        "published": "2026-11-13T14:22:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}