Summary from the original article

An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today. Apple's updates for iOS 26 and 27, released yesterday, do not list a fix. A researcher who goes by forcequit released the escape, called worse_query, on Sunday, a
By info@thehackernews.com (The Hacker News) ·
AI key points, how left, center and right framed this story, tone by side and loaded language are part of News.gg Premium.
Upgrade this serverSome WhatsApp beta testers on iOS are seeing a new option in the app’s bottom navigation bar that replaces the Communities tab. Here are the details. more…
2 hours ago · 9to5mac.com
Bitcoin Core disclosed three previously patched security vulnerabilities, including a high-severity bug affecting block template creation.
3 hours ago · theblock.co
Ledger CEO Pascal Gauthier’s warning that everyone will eventually be hacked came after attackers put hidden components inside genuine hardware wallets to capture recovery phrases. The incident brings the security question beyond the private key stored in a chip. A…
6 hours ago · crypto.news
Ledger CEO Pascal Gauthier has faced criticism from the cryptocurrency community after warning that everyone will eventually be hacked, a statement that has raised questions about the security assurances offered by hardware wallet manufacturers. During a Bloomberg Crypto interview on…
8 hours ago · crypto.news
NK News Lead Correspondent Shreyas Reddy joins the podcast to discuss North Korea’s record-breaking $6.36 billion cryptocurrency theft from Binance, the sophisticated laundering operation that followed and Pyongyang’s unusual diplomatic response to the allegations. He explains how North Korean hackers allegedly compromised a Binance engineer through a fake recruitment offer, allowing them to steal billions […]
9 hours ago · nknews.org
Across Protocol restores its website after a Namecheap-related domain hijack, with estimated user losses of $350,000 and a promise to reimburse victims.
9 hours ago · crypto.news
The cross-chain bridge said a social engineering attack targeting domain registrar Namecheap allowed hackers to redirect users to a phishing site.
11 hours ago · cointelegraph.com
On 8 November the LNbits team told operators to shut their servers down after attackers created unauthorized accounts and withdrew funds. One operator reported losing 2,285,545 sats. On 10 November, version 1.7.0 shipped as an urgent security update, with a clear instruction: upgrade before you restart . That instruction is easy to break by accident. A systemd unit restarts after a reboot, a container comes back with an old image, and the vulnerable version is serving requests again before anyone checks. Here is a small guard you can put in front of any self-hosted service: it reads the…
11 hours ago · dev.to
11 hours ago · gulfnews.com
The US$6.3 billion stolen in the Binance crypto theft is equivalent to about one-sixth of North Korea's annual national income, according to an analyst.
11 hours ago · channelnewsasia.com
The Hacker News Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
+37 more reports