South Korea’s payment order requires changes to Google and Apple billing

South Korea’s regulator fines Apple over app payment practices

South Korea’s regulator fined Apple over payment restrictions, unfair app-review delays and discriminatory commissions. Its corrective orders require changes to payment choices and app reviews, alongside measures to prevent unequal treatment of South Korean and overseas developers.

Binance reports $5.27 billion net outflow after theft

Binance customers have withdrawn a net $5.27 billion since transactions resumed after the theft. Fortune reported that Binance had put the theft at around $6.3 billion; Binance’s latest disclosure put the amount drained from its cryptocurrency wallets at $6.34 billion. The exchange says it is replacing affected coins and that the latest FBI information indicates North Korea was responsible. Binance says suspending withdrawals alone could not stop all unauthorized asset movements and that new procedures to revoke authorizations slowed its response.

Updated

US cybersecurity agency lists both PHP2Shell flaws as exploited

The US cybersecurity agency listed both PHP2Shell flaws as actively exploited and set a federal remediation deadline. Dream says attackers combined PHP2Shell with a Linux flaw to gain full administrative control of servers, while Palo Alto Networks listed fixes and advised restricting management access.

US Federal Election Commission restores filing after nearly 41 hours

The US Federal Election Commission restored electronic filing after taking the system offline to contain a cyberattack. The restoration allowed campaign groups to resume disclosing late-election spending that the outage had temporarily kept from public view.

Singapore police warn of Ledger wallet tampering after at least 2 cases

Singapore police warned of tampered Ledger wallets after at least 2 cases. Police said preliminary findings showed components that could capture wallet credentials, and advised owners who suspect a compromise to consider moving remaining funds to a trusted wallet with a newly generated recovery phrase.

Cisco Talos details KeyDrift malware designed to collect encryption keys

Cisco Talos’s October 28 analysis describes KeyDrift intercepting decrypted control messages to collect data it assesses as inter-site encryption keys. Talos did not establish whether the keys were sent outside the systems. Cisco directs operators to collect diagnostic files for a support-led assessment before remediation.

Belgium’s tax agency shuts online portal after cyberattack

Belgium’s tax agency shut its online portal and other services after a cyberattack. It has extended the affected filing deadline while staff work to restore access safely; the agency said it had no indications of a data breach.

US cyber agency lists PolyShell after Sansec finds hundreds of store breaches

The US cyber agency has listed PolyShell as actively exploited. Sansec says attackers placed malicious loaders in hundreds of stores; those loaders can fetch further attacker-controlled software, making the response more than a preventive update, with federal civilian executive agencies required to fix the flaw by November 10.

Ukraine’s cyber response team warns of Dahua camera breaches

Ukraine’s CERT-UA warned of unauthorized viewing, changed settings and third-party accounts on Dahua surveillance systems. The alert identifies predictable device identifiers and weak or bypassed login checks as access routes, and recommends disabling unneeded peer-to-peer access, avoiding direct internet exposure and updating device software.

US cyber agency sets November 11 deadline to fix exploited VMware flaw

The US Cybersecurity and Infrastructure Security Agency has set a November 11, 2026 remediation deadline for CVE-2026-41709. Broadcom’s patches address a gap that lets administrators perform some actions without leaving logs; agencies must stop using affected products if mitigations are unavailable.