TECH LITTLE BRAWTA

Incident Analysis

LEARNING ARTICLE

How attackers moved $6.3 billion from Binance in minutes—and the question the exchange still has to answer

North Korea has been named by the FBI. Billions in stolen tokens have been frozen, and Binance is replenishing customer assets. But the transaction records point to a more troubling question: how did the attackers get valid instructions signed? Topics: Cryptocurrency, Transaction Security

LEARNING ARTICLE

One compromised firewall led attackers into Active Directory. The second breach was the real prize.

A researcher-reconstructed campaign used PHP2Shell to take control of 24 exposed firewalls, then reached an internal management server in a US government-affiliated network. What attackers did after gaining that access is only partly known. Topics: Network Security, Vulnerability Management

LEARNING ARTICLE

For two hours, a cyber incident diverted ambulances from New Mexico's only Level I trauma center

UNM Health restored clinical services quickly and says its core servers were not penetrated. The disruption nevertheless reached the region's emergency-care network—and the full scope of the intrusion remains unconfirmed. Topics: Healthcare, Incident Response

How attackers moved $6.3 billion from Binance in minutes—and the question the exchange still has to answer →

One compromised firewall led attackers into Active Directory. The second breach was the real prize. →

For two hours, a cyber incident diverted ambulances from New Mexico's only Level I trauma center →

How attackers moved $6.3 billion from Binance in minutes—and the question the exchange still has to answer

One compromised firewall led attackers into Active Directory. The second breach was the real prize.

For two hours, a cyber incident diverted ambulances from New Mexico's only Level I trauma center