EN PT-BR
← Voltar ao feed
medium finance government energy manufacturing

Security Affairs Newsletter Round 602: Binance hot wallet drain, PHP2Shell, Oracle EBS RCE, GitLab CVE-2026-97229 and Lazarus activity

1 fonte(s) · 1 atualização(ões) · publicado 01/11/2026 10:22 · coletado há 9 horas

Weekly Security Affairs newsletter round 602 aggregates international press headlines. It contains no original analysis, only article titles. Headlines cover a reported $3.5 billion drain from Binance hot wallets, an M365 token spray and replay campaign, and a Polymarket breach by a crypto-draining script. They also cover suspected DPRK staging of PHP2Shell against PHP infrastructure, attempted exploitation of GitLab CVE-2026-97229, and attacks on a critical Oracle E-Business Suite RCE flaw days after its patch. Other items cover the uCreator Android spyware platform, a malicious Anthropic.claude-code 2.1.313 extension in the Cursor marketplace, Volt Typhoon and Lazarus (Operation FlashHole) reporting, and law enforcement actions. Details are only available in the linked source articles.

Detalhes técnicos

  • Headline-level items only, unverified in this article: CVE-2026-97229 (GitLab, attempted exploitation), PHP2Shell RCE exploitation, a critical Brotli decoder vulnerability ("Broccoli2shell"), and an Oracle E-Business Suite RCE flaw.
  • Other headlines mention Microsoft Teams external chat abuse for initial access, a Magento block loader hitting 953 stores (deepveindrilling.com), and a UEFI firmware code-execution flaw affecting most servers.

Remediação

The newsletter gives no remediation guidance. Defenders should consult the linked primary sources for each item.

Linha do tempo

  1. securityaffairs.com ↗ · pub. 01/11/2026 10:22 · coletado 01/11 11:00 primeiro registro

    Security Affairs Newsletter Round 602: Binance hot wallet drain, PHP2Shell, Oracle EBS RCE, GitLab CVE-2026-97229 and Lazarus activity

    ler a análise desta fonte

    Weekly Security Affairs newsletter round 602 aggregates international press headlines. It contains no original analysis, only article titles. Headlines cover a reported $3.5 billion drain from Binance hot wallets, an M365 token spray and replay campaign, and a Polymarket breach by a crypto-draining script. They also cover suspected DPRK staging of PHP2Shell against PHP infrastructure, attempted exploitation of GitLab CVE-2026-97229, and attacks on a critical Oracle E-Business Suite RCE flaw days after its patch. Other items cover the uCreator Android spyware platform, a malicious Anthropic.claude-code 2.1.313 extension in the Cursor marketplace, Volt Typhoon and Lazarus (Operation FlashHole) reporting, and law enforcement actions. Details are only available in the linked source articles.

    Technical Details

    • Headline-level items only, unverified in this article: CVE-2026-97229 (GitLab, attempted exploitation), PHP2Shell RCE exploitation, a critical Brotli decoder vulnerability ("Broccoli2shell"), and an Oracle E-Business Suite RCE flaw.
    • Other headlines mention Microsoft Teams external chat abuse for initial access, a Magento block loader hitting 953 stores (deepveindrilling.com), and a UEFI firmware code-execution flaw affecting most servers.

    Remediation

    The newsletter gives no remediation guidance. Defenders should consult the linked primary sources for each item.