Latest hacks and data breaches

What happened, how they got in and what to check on your own site.

1. 29 Oct–

   Binance

   $6.3 billion

   Most of it moved in about 20 minutes. It may have begun with one laptop.

2. 27 Oct–

   Node2Shell

   Node.js 22, 24, 26

   A flaw in the Brotli decoder inside Node.js. On CISA’s list of exploited flaws.

3. 26 Oct–

   PHP2Shell

   7 in 10 websites

   Two critical PHP flaws under active attack, CISA confirms. Patched 21 October.

4. 5 Oct–

   Denmark

   8.8 million people

   Names, addresses and ID numbers, reached through one firm’s legitimate access.