19 postów
Hackers "hijack" access to AI: bills reach $100,000 within minutes. Google warns of a growing new type of attack - LLMjacking.
Attackers steal API keys for language models and cloud credentials to run AI workloads at someone else's expense and sell access to others.
First, hackers look for open LLM endpoints or valid keys, and then, using stolen tokens (IAM, service account keys, GitHub PATs), they gain a foothold in the victim's infrastructure and escalate their privileges.
North Korean hackers compromised a Binance employee's laptop during a job interview.
Apple has warned iPhone users in 99 countries about a spyware attack.
In total, the notifications reached users in more than 150 countries, journalists among them. Not getting a notification does not rule out an infection.
Experimental AI model from Anthropic hacked a Linux server in 53 minutes: 48 minutes went to finding a way around the protection and only 5 to the actual break-in.
Linux runs on most of the world's servers, so the vulnerability affects a huge number of systems. However, it only concerns those where MPTCP is enabled.
Through this hole, an attacker could gain full control over the server and execute commands as root. No password is required for this, and the user does not have to do anything.
The bug has been living in the Linux kernel since 2015.
Malicious Claude Code 2.1.313 extension build was stealing data from computers and giving hackers access via SSH.
The infected version was distributed through the Cursor extension marketplace for about 11 hours, and up to 5,000 users could have been affected. The official VS Code Marketplace and the Claude Code npm package were not affected.
If you installed Claude Code 2.1.313, here is a quick way to protect yourself:
• Disconnect your computer from the internet.
• Remove the Claude Code 2.1.313 extension.
• Block the address 134.209.82.225 on your router or via Windows Defender.
• Delete the unknown svc-telemetry key from ~/.ssh/authorized_keys.
• Check the SSH server with the command Get-Service sshd and stop it if it is running.
• Terminate the tunnel processes: Stop-Process -Id <PID> -Force.
• Delete the task: schtasks /delete /tn SysMon /f.
• Remove sysmon.cmd from startup.
• Change all important API keys, tokens, passwords, passphrases, etc.
Share with vibe coders.
According to crypto investigator ZachXBT, the $6.3 billion Binance hack may be the work of the North Korean hacking group TraderTraitor (that is 40% of the country's GDP).
The same group is linked to the attack on Bitget, in which $388 million was stolen.
An additional argument for this version is that the funds stolen in both attacks went to the same crypto address.
Binance plans to resume withdrawals within the next 45 hours, the exchange said in an update on its investigation of the hack.
Elon Musk commented on the Binance hack: "Every day is Zero-day".
💰 Binance's SAFU reserve may be worth about $1.18 billion, against the claimed $5.6 billion in potential losses from the hack.
On February 12, 2026, the exchange completed the formation of the SAFU reserve with 15,000 BTC, which was then valued at roughly $1 billion.
If the amount of bitcoin in the fund has not changed, its value by these estimates is about $1.18 billion, or roughly 21% of the claimed loss amount.
Binance - potentially the largest hack in crypto history
According to recent reports, the amount of stolen funds may reach $6 billion. If these figures are confirmed, the incident would surpass the largest known thefts in the history of the crypto industry.
For comparison:
• LuBian, 2020 - about $3.5 billion;
• Bybit, 2025 - about $1.5 billion;
• Ronin, 2022 - about $624 million;
• Poly Network, 2021 - about $611 million.
Approximately $5.6 billion has so far been withdrawn from Binance.
