CrypticSploit

🦜 💻 🔥 🐀

[CrypticSploit @CrypticSploit]

I got this Mfker!

Tip , make sure your report is pretty
and all that crap or else they will make you retype it

again Over all 10/10 exam

[Bitcoin News @BitcoinNewsCom]

POLYMARKET HALTS TRADING AFTER HACKERS DRAIN USER FUNDS WITHOUT PASSWORDS OR SEED PHRASES

Attackers allegedly exploited users’ active sessions to sell their positions and withdraw funds directly through Polymarket’s own system.

The attack reportedly originated from a compromised DebugBear website performance monitoring script, which was replaced with malicious code that users’ browsers trusted.

Trading resumed after roughly one hour. Polymarket says affected users will be reimbursed and the incident has been referred to UK law enforcement.

[The Kobeissi Letter @KobeissiLetter]

BREAKING: Binance has been hacked with wallets across the Ethereum, Bitcoin, and TRON networks seeing outflows of -$5.7 billion.

The hack includes $1.45 billion worth of Bitcoin and $875 million worth of ETH.

If confirmed, this would mark the biggest hack in crypto history.

We expect more information shortly.

[International Cyber Digest @IntCyberDigest]

‼️ UPDATE ON THE BINANCE HACK:

Whoever emptied a Binance hot wallet had 50 authorisations signed with that wallet's own private key, on-chain data shows.

Under Ethereum's EIP-7702, an authorisation is a signed permission that lets a wallet hand control of itself to code.

Each one works only for the wallet's next transaction number, its nonce. Binance's wallet was still sending transactions, so that number kept moving.

The sender didn't know which number would be live, so they packed all 50 into one transaction, Blockaid says. One matched.

That one installed a sweeper contract on the wallet. Blockaid found that only the Tornado Cash-funded sender can operate it.

Minutes later it emptied the wallet of $1.6B in USDT, 167,464 ETH and 60+ other tokens.

Only that key, or the system that holds it, can produce those signatures. How the sender got them is unknown.

Across Ethereum, Bitcoin and Tron, at least $5.57B left Binance-linked wallets.

Binance says user funds are "completely safe" but has not explained how.

[Dark Web Informer @DarkWebInformer]

$5 Billion being tracked right now. 😬

[International Cyber Digest @IntCyberDigest]

‼️ BREAKING: PolymarkeT users were drained through its own website.

A hijacked DebugBear monitoring script sold users' positions and sent ~$2.6M to one wallet.

Polymarket halted trading and says victims will be made whole. The wallet has since been emptied.

[vxdb @vxdb]

Update: Binance Hack Estimated to be $5.7B

Per @arkham

[CrypticSploit @CrypticSploit]

@MrCreator1 OOOF

[Ars Technica @arstechnica]

Massive leak exposes 41,000 DHS workers and undercover ICE agents https://t.co/1Pq69JLBWM

[CrypticSploit @CrypticSploit]

@ipurple I paid out of pocket as well so it did hurt but the courses are life time and new updates will be added to them. The AWS cost would be the only hidden fee and you have control of that cause you decide how you wanna set up the AWS instance

[CrypticSploit @CrypticSploit]

@Oluwaphilemon1 Was this in lmstudio / bionic ?

[Florian Roth ⚡️ @cyb3rops]

The potential impact of the ConnectWise supply chain attack is massive.

One compromised OAuth application with elevated permissions could give attackers access to emails, files, and directory data across hundreds of Microsoft 365 tenants.

Even worse, attackers could establish persistent access by adding credentials to other applications, surviving the revocation of the original compromised credentials.

And with MSPs involved, the potential blast radius could extend even further to downstream customers.

We don't know the full extent of the compromise yet, but this could affect far more organizations than those directly using ConnectWise Cloud Backup.

https://t.co/0RMJugvcrM

[Brave @brave]

New research by Citizen Lab reveals zero-click spyware delivered through targeted ads. They call it "AdFection."

Just viewing an ad can be enough to infect a device.

[Dark Web Intelligence @DailyDarkWeb]

🇺🇸 🚨 CALIFORNIA SAYS ETS BREACH COPIED STATEWIDE TESTING DATA ON PUBLIC-SCHOOL STUDENTS

Educational Testing Service (ETS), the nonprofit that runs California's statewide student assessments (CAASPP, ELPAC) under state contract, has begun notifying students and families, the California Department of Education said on Oct 16, 2026.

An unauthorized party used a compromised login credential to copy files from an ETS SFTP site between May 22 and Sept 18, 2026. ETS identified the activity on Sept 25.

The copied data covers students including, but not limited to, all those enrolled in the previous three school years. It may include names, birth dates, addresses, student IDs, demographics, disability/504 status and assessment results. No SSNs, financial data or passwords.

No total count has been given. ETS says it has found no evidence the data was made public. Notices began Oct 16 and are expected to run through early November.

https://t.co/cOYeY8wORy

#DataBreach #California

[Dark Web Intelligence @DailyDarkWeb]

🇺🇸 🚨 FLORIDA DMV (FLHSMV) CONFIRMS BREACH OF DRIVER LICENSE AND VEHICLE RECORDS, INCLUDING DOCUMENT IMAGES

The Florida Department of Highway Safety and Motor Vehicles said in an official Oct 16, 2026 notice that a malicious actor accessed department records on Sept 4, 2026 using compromised credentials.

Key details:
• FLHSMV attributes the breach to an "international cybercriminal organization"
• Access came through credentials of a local Florida law enforcement agency employee, which FLHSMV says were improperly stored on an electronic device
• Potentially affected: driver license and motor vehicle data, document images and other personal information
• FLHSMV has not said how many people are affected and says it has no evidence of misuse so far
• Letters are going out this week to current license and ID holders, with 1 year of Sontiq (TransUnion) monitoring and $1M identity theft insurance
• Former license, ID or title holders may not get a letter and are covered by a substitute notice

⚠️ Analyst Note:
License data plus document images is a strong kit for identity fraud and account takeover. Expect phishing that impersonates FLHSMV breach letters: check only via https://t.co/s9lPYkTqvS, and consider a credit freeze. One stored credential at a partner agency was enough to reach a statewide system.

Sources:
https://t.co/h9hPx8Kqcu
https://t.co/VGoFAibR0C

#DDW #DataBreach #Florida #FLHSMV #CyberSecurity

[CrypticSploit @CrypticSploit]

@Archie_1997 Noice

[CrypticSploit @CrypticSploit]

@Ivanklydz More like flipping?

[International Cyber Digest @IntCyberDigest]

‼️ UPDATE: Calif showed one-tap attacks on Signal and iMessage on iOS, which make it possible to run code on an iPhone with a booby-trapped PDF.

On iOS 26.5, opening one in iMessage sent the phone's messages to a server.

Calif says everything will be released "in due time."

[Pirat_Nation 🔴 @Pirat_Nation]

Jagex has cancelled RuneScape Reignited just days after announcing it.

Reignited was planned as a fresh-start version of RuneScape, giving players new characters, progression and economies.

Jagex has now backed down.

“It is clear that we missed the mark on this, and so we are not moving forward with it.”

He also said the goal is to grow RuneScape without hurting the existing community.

“Our goal is to see RuneScape grow again, with returning players coming back and new players joining, but never at the expense of our existing community.”

[CrypticSploit @CrypticSploit]

@azurwoofwoof @kernelstub @Ivanklydz gottchhhaaa