{"data":{"id":"13c20765-a843-4dc2-b20b-ddb8ef6a0b3e","title":"Binance heist is stark example of AI governance gaps and basic security failures","summary":"The Binance breach, a theft of approximately $6.34 billion, resulted from avoidable technical and human security failures, including weak access controls and overly broad privileges. Attackers installed malware on developer machines in two incidents, one of which went undetected, then pivoted through an internal AI tool to obtain an access token and deploy a container before executing rogue withdrawals. The FBI attributes the breach to North Korea's TraderTraitor unit, which other researchers consider part of the Lazarus operation.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4245354/binance-heist-is-stark-example-of-ai-governance-gaps-and-basic-security-failures.html","publishedAt":"2026-11-05T21:57:37.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["Binance","Homebrew"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-05T21:57:37.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0010"]}}