Security

Linux fixed a critical flaw, CVE-2026-98432, that allowed an attacker to take root control of a server without credentials. Red Hat rated it Critical on October 30, Ubuntu remains vulnerable, and Anthropic says Claude wrote a working exploit.

Andrej Karpathy built Hacker News HackerTube in one Saturday, using Claude Opus 5.5 to filter 40,000 comments and assemble a catalog of 6,454 YouTube videos. The site doesn’t require accounts or store user data.

Hackers drained $6.3 billion from Binance’s hot wallets in just 20 minutes, spread across at least ten blockchains. Blockchain tracking firms TRM Labs, Chainalysis, and Elliptic point to North Korean hackers linked to the TraderTraitor group. Binance froze part of the funds and pledged to cover the losses.

Northflank confirmed a security breach on October 30, 2026, and asked all customers to immediately rotate their environment variables. Several users are already reporting AI keys used by third parties.

LiteLLM version 1.107.0 reached PyPI with an active credential stealer and backdoor on Linux, macOS, and Windows. SafeDep concludes the attack came from BerriAI’s own build pipeline, not a stolen token.