Binance says a fake job interview and a tampered Homebrew download opened the door to its $6.3 billion hack
Binance's breach report traces the $6.3 billion theft to a fake recruiter, a malicious interview "assignment" and a tampered Homebrew download, and blames North Korean hackers. Apple opens Siri AI to every app through App Intents in the 27.3 betas, GitBook tells customers to rotate tokens after a breach, and a Postman user says the desktop app installed plugins into Claude Code and Codex without asking.
- Binance says North Korean hackers reached its wallet systems through engineers’ machines: a fake job interview whose “assignment” carried malware, and a tampered Homebrew download in June.
- Apple opened Siri AI to any app in the iOS, iPadOS, macOS and visionOS 27.3 betas: apps expose actions through App Intents, and App Store submissions open in the spring.
- GitBook says an attacker reached some of its infrastructure credentials on 2 November and may have accessed Git Sync secrets, API tokens and integration tokens; customers should rotate them now.
- A Postman user says desktop version 12.33.4 installed Postman plugins and a startup hook into Claude Code and Codex without asking; Postman hasn’t responded on the issue.
- AMD’s Q3 revenue rose 45% to a record $13.4 billion, with data center sales up 97% to $8.5 billion; it guides about $17 billion for Q4.
How Binance’s attackers got in
Binance on Tuesday published its findings on the 29 October theft of about $6.3 billion and blamed North Korean hackers, Fortune reports. A software engineer was contacted on a job-hunting platform by someone posing as a project director. A second “interviewer” then had him download an “assignment” carrying malware Binance’s tools missed, Decrypt reports. Separately, in June, a wallet DevOps engineer installed a tampered Homebrew while setting up an AI coding tool he found through a search engine. The attackers then took over two wallet engineers’ machines, reached a wallet signing service with stolen credentials, and abused Ethereum’s EIP-7702 delegation to take partial control of a hot wallet. About $2.5 billion was recovered through Tether and Circle freezes, and Binance says it has replenished 98% of the stolen coins.
Why it matters
Every entry point was a developer’s machine. Install Homebrew and agent tools only from their official sites, and treat take-home “assignments” from recruiters as hostile code: open them in a throwaway VM, never on a work laptop.
Developer laptops are now the crown jewels
The same week, a tampered Claude Code extension in Cursor’s marketplace went after developer machines too. Expect firms to move signing and deploy rights off engineers’ everyday laptops.
Siri AI opens to every app
Apple on 3 November opened Siri AI to all developers in a Developer Preview in the iOS, iPadOS, macOS and visionOS 27.3 betas. Any app can bring its content and actions into Siri AI through App Intents, so users can ask in their own words and Siri runs the custom action. New “skills” let developers teach Siri to chain several actions, and Siri AI can now surface any entity in the Spotlight semantic index, not only ones that fit Apple’s schemas. It ships to customers “in a few months”, App Store submissions open in the spring, and terms come later. Siri AI isn’t available in the EU on iOS, iPadOS or watchOS.
Why it matters
If your app already has App Intents, start testing now: Apple runs Q&A labs on 4 and 5 November. Siri AI has daily usage limits, with paid expanded access promised later.
Apple’s assistant becomes a storefront
Being callable by Siri is now a distribution channel, like App Store search. Expect the unpublished terms, not the API, to decide how much control Apple keeps over which app answers.
GitBook breached through its infrastructure credentials
GitBook, the documentation platform, says an attacker gained access to some infrastructure credentials at 19:00 CET on 2 November, in what it calls “a sophisticated, highly targeted attack using AI agents”. It took the app offline, rotated its secrets and revoked every customer’s API tokens; services were back on 3 November. The attacker may have accessed integration tokens, Git Sync secrets, API tokens and the questions visitors asked GitBook Assistant. GitBook has found no sign that content was modified.
Why it matters
If you use GitBook, rotate any third-party tokens you gave it, regenerate your GitBook API tokens and published-integration secrets, and re-authenticate its MCP server.
Docs platforms hold more keys than you think
Git Sync means a docs tool holds write tokens to your repositories. Like Northflank last week, the damage depends on which stored secrets customers rotate, not on what GitBook fixes.
A Postman user says the desktop app installed itself into coding agents
A Postman user reports that Postman desktop 12.33.4 installed its plugins into Claude Code and Codex without being asked, through an “auto-existing-upgrade” path in Postman’s log. The reporter found a startup hook telling agents to load Postman’s skill before “any non-trivial API engineering task”, plus a Postman MCP server and CLI. Postman’s plugin repository added hook auto-approval to its installer on 21 October. The reporter says nothing shows data leaving the machine. Postman hasn’t replied on the issue, filed 25 October.
Why it matters
Check ~/.claude/settings.json, Codex’s config and ~/.local/bin for Postman entries. Postman’s installer docs give npx @postman/postman-plugin remove to uninstall it from every agent.
Agent configs are the new browser toolbar
Any app on a laptop can write to an agent’s config and change how it behaves. Agents need signed plugins and a prompt before a new hook runs, not trust records any installer can write.
Quick hits
- CrowdStrike will buy Fiddler AI and Dreadnode, two AI-agent security startups, for about $400 million and $95 million according to the Wall Street Journal, TechCrunch reports.
- AMD’s Q3 revenue rose 45% to a record $13.4 billion, with data center revenue up 97% to $8.5 billion; AMD expects about $17 billion in Q4.
- Vercel Security Review is in public beta for Pro and Enterprise teams: it reviews every push to a connected GitHub repo and can open fix PRs, billed at provider token rates plus $0.25 per million tokens; reviews are free until 10 November.
- Revolut says self-hosting GLM cut its AI coding inference costs by about 90%: self-hosted GLM-5.1 cost about a tenth of Claude Code or Codex, and it now serves GLM-5.3 on 56 Nvidia B200s, routing vision work to Gemini or GPT.
- Google will switch off AI and Search for K-12 student accounts by default. Gemini, Gemini Notebook, Gemini in Classroom and Search stay off until administrators opt in, with details due “in the coming months”; schools that restrict AI lose Search, TechCrunch reports.
- Password manager mSecure tells customers to change their passwords after “suspicious activity”, without saying what happened or whether vaults were accessed; it also advises resetting two-factor and removing passkeys.
- Apple will require an 18+ rating for dating and romantic AI companion apps. App Store Connect adds new content descriptors from 16 November, including for apps that share a user’s location with others; every app must declare them by 12 January 2027.
- GitHub Copilot is available as an agent in JetBrains Air, over the Agent Client Protocol, for local tasks and for cloud tasks billed to your Copilot plan.
- Cloudflare launches Zero Wire, a public Cloudflare Radar feed on critical, internet-facing CVEs with plain-language “what to do now” steps.