North Korean fake job interview leads to $6.3B Binance heist

Binance's $6.34B Crypto Heist, Europe's Supermarket Fridge Hacks, and the Rise of LLM Jacking

Cybersecurity Today host David Shipley reports Binance's $6.34B October 29 crypto theft, which Binance says began with a June supply-chain compromise and escalated via a fake hiring process that delivered poisoned developer tools, leading to access to the internal wallet signing service and abuse of Ethereum EIP-7702

The episode also covers refrigerator system attacks spreading across European retailers and suppliers via vulnerable controllers, with the Pentagon treating similar August U.S. commissary outages as suspected cyberattacks.

Barracuda urges patching two flaws that can be chained for root control if admin interfaces are exposed.

Researchers link Chinese state-linked attackers to chaining PHP-to-shell bugs and a kernel exploit to gain root on Palo Alto firewalls.

Finally, Mandiant details "LLM jacking," where criminals steal API keys or cloud tokens to run up AI bills rapidly.

00:00 Today's Cyber Headlines 00:34 Binance Heist via Fake Hiring 03:52 Fridge Hacks Spread in Europe 05:46 Pentagon Probes US Spoilage 07:03 Barracuda Root-Takeover Flaws 08:44 PHP to Shell Hits PAN-OS 09:51 Disclosure Drama and Exploits 11:15 LLM Jacking Drains AI Budgets 12:58 Wrap Up and Sign Off