Notifications

🚨CZ: USER FUNDS ARE SAFE, EXPECTS FULL COVERAGE AFTER SUSPECTED BINANCE HACK @cz_binance says user funds are safe and that it does look like a hack on Binance. He thanked Tether and Circle for their quick freezes of roughly $971M USDT and $823M USDC. As a shareholder, he expects all user tunds will be tully covered.

⚠️UPDATE: BINANCE INVESTIGATING REPORTED SECURITY ISSUE Binance says it is aware of reports about a potential security issue and is actively investigating. The exchange has not confirmed any impact on user funds and says further updates will be shared through official channels. Users are urged to stay alert for scams and unverified claims. ⚡️ Join: @comnotify | @star2ad #1 OTC

⚠️UPDATE: BINANCE INVESTIGATING REPORTED SECURITY ISSUE Binance says it is aware of reports about a potential security issue and is actively investigating. The exchange has not confirmed any impact on user funds and says further updates will be shared through official channels. Users are urged to stay alert for scams and unverified claims. ⚡️ Join: @comnotify | @star2ad #1 OTC

⚠️UPDATE: BINANCE INVESTIGATING REPORTED SECURITY ISSUE Binance says it is aware of reports about a potential security issue and is actively investigating. The exchange has not confirmed any impact on user funds and says further updates will be shared through official channels. Users are urged to stay alert for scams and unverified claims. ⚡️ Join: @comnotify | @star2ad #1 OTC

⚠️BREAKING: $2.53 BILLION MOVED FROM BINANCE HOT WALLETS On-chain data shows approximately $2.53 billion across 60+ tokens moving from Binance hot wallets to a newly created address. The transfers were reportedly triggered by a wallet funded through Tornado Cash. The suspicious activity has raised fears of a possible wallet compromise, but Binance has not confirmed a hack or any loss of customer funds. 🔔Subscribe — @comnotify

⚠️JUST IN: $50,000 LOST IN ETHEREUM ADDRESS POISONING ATTACK A crypto user reportedly lost $50,000 in USDT after sending funds to a fake wallet address designed to resemble the real one. The scam exploits matching starting and ending characters to trick victims into copying the wrong address. Always verify the entire wallet address and never copy it from transaction history. 🔔Subscribe — @comnotify

⚠️BREAKING: US ELECTION WATCHDOG SHUTS DOWN SERVICES AFTER HACKING ATTEMPT The US Federal Election Commission (FEC) took its online filing system offline after a reported hacking attempt, disrupting campaign finance disclosures ahead of the November 3 midterm elections. The outage blocks mandatory 24-hour and 48-hour spending reports, limiting public visibility into campaign spending. The FEC says IT teams are working to restore service, while voting itself is not expected to be affected. 🔔Subscribe — @comnotify

⚠️BREAKING: WARHORSE STUDIOS HACKED Warhorse Studios, developer of Kingdom Come: Deliverance, has confirmed a cyberattack in which attackers accessed company systems and data. CEO Martin Frývaldský called it a serious incident. The studio is investigating, but has not revealed what data was accessed or whether its upcoming Lord of the Rings RPG was affected. 🔔Subscribe — @comnotify

⚠️BREAKING: WARHORSE STUDIOS HACKED Warhorse Studios, developer of Kingdom Come: Deliverance, has confirmed a cyberattack in which attackers accessed company systems and data. CEO Martin Frývaldský called it a serious incident. The studio is investigating, but has not revealed what data was accessed or whether its upcoming Lord of the Rings RPG was affected. 🔔Subscribe — @comnotify

Hi

⚠️JUST IN: PLAYSTATION PAYS HACKER $5,000 FOR PSN SECURITY FLAW A Dutch hacker reportedly received $5,000 from PlayStation for discovering a flaw that let attackers add unauthorized child accounts to other users’ PSN families According to the report, attackers could exploit account recovery through customer support to take over accounts despite 2FA or passkeys. The vulnerability is reportedly patched, but unauthorized child accounts may remain. 🔔Subscribe — @comnotify

⚠️BREAKING: Magecart Hack Targets Dozens of Brazilian Fashion Stores Sansec reports that a Brazilian Magecart gang injected a credit-card skimmer into Convertr’s Plausible analytics script, potentially exposing shoppers’ card details, CVVs and tax IDs during checkout. Sansec said Convertr was still serving the malicious script on October 26, despite being notified. 🔔JOIN — @comnotify

⚠️BREAKING: Magecart Hack Targets Dozens of Brazilian Fashion Stores Sansec reports that a Brazilian Magecart gang injected a credit-card skimmer into Convertr’s Plausible analytics script, potentially exposing shoppers’ card details, CVVs and tax IDs during checkout. Sansec said Convertr was still serving the malicious script on October 26, despite being notified. 🔔JOIN — @comnotify

⚠️BREAKING: UNIVERSITY HACK EXPOSES 525,000 PEOPLE’S DATA Hackers accessed a University of Copenhagen test database containing names, Danish national ID numbers, phone numbers and personal email addresses of around 525,000 people. The university has blocked access and launched an investigation. It remains unclear whose data was affected or whether it was copied. 🔔Subscribe — @comnotify

⚠️BREAKING: UNIVERSITY HACK EXPOSES 525,000 PEOPLE’S DATA Hackers accessed a University of Copenhagen test database containing names, Danish national ID numbers, phone numbers and personal email addresses of around 525,000 people. The university has blocked access and launched an investigation. It remains unclear whose data was affected or whether it was copied. 📱 JOIN — @comnotify

💬 @CHATED Over 1,500+ members have now been unmuted and unbanned. 🔔Reminder: Promo selling is not allowed.

👁 TELEGRAM JUST HID GIFT OWNERS’ USERNAMES Telegram has changed how collectible gifts work: • Owners’ usernames are no longer clickable — you can’t open someone’s profile directly through a gift anymore. • Gift offers have been disabled — if you want to make an offer, you now have to do it through the user’s profile. Telegram appears to be tightening privacy and security for gift holders. 📱 JOIN @comnotify

⚠️BREAKING: GODADDY TO REVOKE 404,607 TLS CERTIFICATES GoDaddy is revoking 404,607 TLS certificates after a third party discovered that their certificate policy information did not comply with the company’s published rules. The issue affects certificates issued under GoDaddy and Starfield, its certificate authority brand. GoDaddy has corrected the documentation and resumed certificate issuance, while coordinating replacements with affected customers. Website owners using affected certificates must reissue and reinstall them to avoid potential HTTPS disruptions. GoDaddy says the issue concerns certificate compliance, not evidence that the certificates were compromised. 🔔Subscribe — @comnotify

⚠️BREAKING: INDIA WARNS OF AI DEEPFAKE SCAMS USING MODI AND NIRMALA SITHARAMAN India’s cybercrime agency has warned about fraudulent Facebook and Instagram ads using AI-generated deepfakes of Prime Minister Narendra Modi and Finance Minister Nirmala Sitharaman to promote fake welfare schemes. Victims are reportedly asked to pay successive charges, including taxes, processing fees and verification fees, to access promised benefits. Some callers reportedly use +92 numbers, Pakistan’s country code. Authorities urge people to verify government schemes through official channels and never pay upfront fees based on social media advertisements. 🔔Subscribe — @comnotify

⚠️BREAKING: WORKING EXPLOIT EMERGES FOR CRITICAL PHP ZERO-DAYS BEFORE PATCH Security firm Calif reportedly demonstrated a working exploit for two critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, ahead of the scheduled security patch. A briefly published video showed commands being executed on a WordPress site running PHP 8.5.4. Security researcher Kevin Beaumont reportedly confirmed the screenshot was genuine, while a separate public proof-of-concept remains unreliable. The flaws could enable remote code execution without authentication, potentially putting websites and applications built on PHP at risk. The official patch was scheduled for 14:00 UTC on October 21. PHP core developers have warned that temporary configuration changes are not a reliable substitute for upgrading. Administrators should prepare to install the official fix immediately upon release. 🔔— @comnotify