⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More

Summary: The FBI attributed the theft of more than $6 billion in virtual assets from Binance to a North Korean hacking group called TraderTraitor, with funds taken across 11 blockchains and 82% on Ethereum and Bitcoin. Of the $6.43 billion stolen, $2.85 billion has been frozen on-chain by Tether, Circle, Ripple, Arbitrum, and Optimism, a haul that eclipses the $1.46 billion taken from Bybit in February 2025.
Why it matters: A single attributed actor now holds the record for the largest cryptocurrency theft in history at $6.43 billion, and only $2.85 billion of it was frozen - the rest moved across 11 blockchains before anyone could stop it.

Read the original at The Hacker News ↗

Topics: Fraud & Scams
Mentions: CVE-2023-22793 CVE-2026-101296 CVE-2026-101356 CVE-2026-102438 CVE-2026-103119 CVE-2026-103401 CVE-2026-103402 CVE-2026-103403 CVE-2026-103404 CVE-2026-103405 CVE-2026-103406 CVE-2026-103407 CVE-2026-103408 CVE-2026-103409 CVE-2026-103593 CVE-2026-103594 CVE-2026-106378 CVE-2026-107238 CVE-2026-107239 CVE-2026-110186 CVE-2026-110720 CVE-2026-111551 CVE-2026-111585 CVE-2026-112709 CVE-2026-112710 CVE-2026-112816 CVE-2026-114349 CVE-2026-114573 CVE-2026-114595 CVE-2026-114596 CVE-2026-114597 CVE-2026-114598 CVE-2026-115547 CVE-2026-115881 CVE-2026-115884 CVE-2026-115889 CVE-2026-115893 CVE-2026-117860 CVE-2026-117954 CVE-2026-118005 CVE-2026-118017 CVE-2026-118306 CVE-2026-118331 CVE-2026-118344 CVE-2026-118348 CVE-2026-118539 CVE-2026-13313 CVE-2026-14157 CVE-2026-14911 CVE-2026-16528 CVE-2026-17518 CVE-2026-18672 CVE-2026-19219 CVE-2026-19386 CVE-2026-19396 CVE-2026-75753 CVE-2026-75775 CVE-2026-75779 CVE-2026-78165 CVE-2026-85250 CVE-2026-85251 CVE-2026-88781 CVE-2026-88900 CVE-2026-88901 CVE-2026-9082 CVE-2026-90885 CVE-2026-90975 CVE-2026-91141 CVE-2026-93489 CVE-2026-93495 CVE-2026-93680 CVE-2026-93857 CVE-2026-93865 CVE-2026-93866 CVE-2026-97631 CVE-2026-98432
Related: Two Critical Wasmtime Flaws Could Let Malicious Web Assembly Modules Escape Sandboxes Cyber Risks ·
CVE-2026-9082: Drupal Core SQL Injection Vulnerability Known Exploited Vulnerabilities · May 22, 2026
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks Cyber Risks ·