FBI ties North Korea to $6.3B Binance heist, Cybercriminals breach four top Canadian law firms, Chinese spies use AI agent to hit 140 targets

Vishing Breaches Top Canadian Law Firms, FBI Pins Record Binance Heist on North Korea, and GM Pays $220M Privacy Settlement

David Shipley covers major cybersecurity headlines for Nov. 2, 2026: four large Canadian law firms (McCarthy Tétrault, Davies, Bennett Jones, and BLG) were breached via vishing impersonating IT on Teams and spoofed phone numbers, leading to compromised accounts and alleged large-scale file theft, while firms share intel and bring in CrowdStrike and Mandiant.

The FBI attributes the $6.36B Binance crypto theft to North Korea's TraderTraitor/Lazarus, details laundering tactics and wallet addresses, and Binance says it has covered 95% of losses.

Chainalysis discloses a breach exposing limited customer directory data.

CrowdStrike reports China-linked Vapor Panda using Artex AI at scale.

A fake Claude code extension briefly appeared in Cursor's marketplace.

GM agrees to a $220M settlement over Smart Driver data sales.

00:00 Top Stories Rundown 00:35 Vishing Law Firm Breaches 02:52 North Korea Binance Heist 05:18 Chainalysis Gets Hacked 07:07 Agentic AI Attack Surge 09:33 Fake Claude Extension Scam 11:15 GM Driver Data Settlement 13:25 Wrap Up and Sign Off