An already bumper month, which saw a PHP vulnerability threaten an estimated 70% of websites and Ledger devices drained for $90 million via spyware implants, ended with a bang as Binance suffered the biggest hack (or theft of any kind) in history.

The National Cybersecurity Alliance set this year’s theme as “Don’t Make It Easy for Them.” However, many have taken the stream of serious security breaches in the past month, both within crypto and elsewhere, as a sign of the dire state of cybersecurity in the age of AI-assisted hacking.

I would like to congratulate the organizers of the 2026 Cybersecurity Awareness Month for putting together a truly spectacular event

Blockchain security firm Peckshield tallied 56 “major hacks” across the crypto sector during Cybersecurity Awareness Month.

#PeckShieldAlert In October 2026, the crypto industry experienced 56 major hacks, resulting in total losses of $6.48B, a ~745% month-over-month increase from September’s $766.49M.

The #Binance incident (~$6.3B, with $3B already frozen) has jumped to #1 among the largest crypto… pic.twitter.com/Tlqh4yq9om

The vast majority of the month’s losses were from the monster $6.3 billion hack of Binance, of which around $3 billion was frozen on-chain. The FBI has officially attributed the attack to the North Korea-affiliated TraderTraitor, but the DPRK has denied any involvement.

In its latest update, Binance detailed the “sophisticated, multi-stage campaign” which led to the attack, beginning in June when an employee downloaded a malicious version of the package manager Homebrew.

Then, in September, another engineer was “instructed to download an ‘assignment’ containing a malicious code repository” during a staged job interview.

Source link