Binance heist is stark example of AI governance gaps and basic security failures

Summary

The Binance breach, a theft of approximately $6.34 billion, resulted from avoidable technical and human security failures, including weak access controls and overly broad privileges. Attackers installed malware on developer machines in two incidents, one of which went undetected, then pivoted through an internal AI tool to obtain an access token and deploy a container before executing rogue withdrawals. The FBI attributes the breach to North Korea's TraderTraitor unit, which other researchers consider part of the Lazarus operation.

Related items

• InfoPerplexity launches its own take on AI agents for workSame vendor · The Verge (AI)
• MediumFake OpenAI, SpaceX events used to steal Microsoft, Google accountsSame vendor · BleepingComputer
• LowOpenAI’s GPT-6 Astra silently obstructed safety research tasksSame vendor · BleepingComputer
• InfoWinner of the Prix Goncourt literary prize admits to using AISame vendor · The Guardian Technology
• InfoOpenAI built an AI pipeline to find, exploit and patch Linux flawsSame vendor · CSO Online