Binance's multibillion-dollar theft leads a week of exploited edge flaws and defence-tech rounds
Binance put the impact of its breach at about $6.3 billion, with analysts pointing to North Korea, while Cisco firewalls, GitLab and a Linux kernel flaw were all exploited or weaponised. Helsing unveiled an air defence system built against Russia's jet-powered drones, Bedrock Robotics raised $600 million, and AP showed how imagery restrictions have limited open verification of the Iran war. If you read one story, make it Binance.
This week's pick
- Binance puts crypto theft at about $6.3 billion as analysts blame North Korea Binance says about $3 billion is frozen and it will cover all losses, and a compromised DevOps laptop may be the entry point, though no government has confirmed attribution.
OSINT
- AP imagery tracks Iran's strikes on US bases AP counts more than 115 strikes damaging structures at 26 sites, and says imagery providers with US contracts delayed or blocked releases at officials' request.
- EU delays free Sentinel imagery over Gaza Bellingcat found a 24-hour delay on Sentinel-1 and Sentinel-2 tiles covering Gaza and parts of the West Bank, which the EU says is meant to mitigate Middle East war threats.
- Satellite imagery shows new air defences around Putin's Valdai residence About 16 new towers appear within 50 km, taking identified positions above 50, though their armament is unconfirmed.
Drones
- Helsing unveils Contra air defence system and two interceptors aimed at Russia's jet-powered Gerans Both interceptors are still in testing, with market readiness expected in the second half of 2027.
- ISW says Ukraine's jet-drone interception rate slipped to about 74 per cent during Starshield disruptions Interceptor drones largely depend on Starshield to reach the speeds needed against jet-powered targets.
- FCC schedules a 19 November vote opening 450 MHz to drone data links and 24 GHz to drone-detection radar The omnibus order also covers in-flight internet and a separate 800 MHz decision.
VC Investment
- Bedrock Robotics raises a $600M Series C at a $4.1B valuation CapitalG and Emergence co-led the round for its autonomous excavators, which have done paid work on live sites since August.
- Firehawk Defense raises more than $150M at over $1.4B, co-led by Advent and Rochefort The Dallas firm makes artillery and rocket motors, challenging a long-standing two-company US supplier duopoly.
- Salesforce agrees to buy military logistics start-up Rune Technologies The price of about $375M is reported but unconfirmed, and Rune's software is used by the US Army and Marine Corps.
CyberSecurity
- Cisco patches exploited ASA and FTD VPN flaw CVE-2026-76418 that lets attackers reload firewalls CISA added it to its exploited list, and Cisco has shared no details on attackers or targets.
- Anthropic exploit for Linux kernel flaw CVE-2026-98432 gives remote root on MPTCP servers The flaw is rated CVSS 9.8 and reaches back to kernel 4.4, with fixes out but Ubuntu and RHEL kernels reported unpatched on 30 October.
- Lumen links Volt Typhoon's Silent Train relay network to four confirmed zero-day campaigns The campaigns hit Versa Director, N-able N-central, Cisco Catalyst SD-WAN and VeloCloud Orchestrator.
- CISA lists maximum-severity GitLab flaw CVE-2026-97229 as exploited after an attempted attack on Alpine Linux Upgrading GitLab alone did not fix Alpine's server, as installs with their own Ruby also need a patched version.