VulnHub

Real-time Cybersecurity News

Critical

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

SecurityWeek
Actively Exploited

Overview

A recent supply chain attack has resulted in over $2 million being drained from users of Polymarket, a prediction market platform. The attackers used malicious code associated with a website monitoring tool to hijack the accounts of logged-in users, allowing them to steal funds directly. This incident raises serious concerns about the security of third-party tools that integrate with financial platforms, as they can be exploited to compromise user accounts. Users of Polymarket and similar platforms should be vigilant about their account security and consider the risks of using third-party services. The attack not only affects individual traders but also undermines trust in online trading platforms.

Key Takeaways

  • Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
  • Affected Systems: Polymarket trading platform, website monitoring tools
  • Action Required: Users should review their account security practices, enable two-factor authentication, and avoid using unverified third-party tools.
  • Timeline: Newly disclosed

Original Article Summary

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek.

Impact

Polymarket trading platform, website monitoring tools

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Newly disclosed

Remediation

Users should review their account security practices, enable two-factor authentication, and avoid using unverified third-party tools.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

New Android SMS of Death exploit can remotely crash unpatched phones

BleepingComputer

A security researcher has demonstrated a new exploit for an Android vulnerability known as 'SMS of Death,' identified as CVE-2026-58882. This exploit allows attackers to remotely crash unpatched Android devices or disrupt their cellular service by sending a specially crafted text message. Users of Android devices that haven’t been updated with the latest security patches are at risk. The proof-of-concept exploit has raised concerns about the potential for widespread disruption, particularly as text messaging is a fundamental communication method for many. It underscores the necessity for users to keep their devices updated to safeguard against such vulnerabilities.

Oct 31, 2026

Reddit to lock content behind logins to fight scrapers

BleepingComputer

Reddit is taking a significant step to combat content scraping by transitioning to a model that will require users to log in to access most of its content. Co-founder Steve Huffman announced that this change will gradually limit access for visitors who do not have accounts. The move is aimed at protecting the site's data and ensuring that the community's content is not misused by scrapers. This change affects all users, particularly those who frequently browse Reddit without logging in. By restricting access, Reddit hopes to foster a more secure environment for its users and content creators, ultimately preserving the integrity of its platform.

Oct 31, 2026

Chainalysis discloses data breach from "offensive agentic techniques"

BleepingComputer

Chainalysis, a blockchain analytics firm, has reported a data breach that allowed attackers to exploit internal systems using what they described as 'offensive agentic techniques.' This breach has led to the exposure of sensitive customer information, including names, email addresses, user IDs, and organizational roles. Affected customers include individuals and organizations that rely on Chainalysis for blockchain data and analytics. The incident raises concerns about the security measures in place at firms handling sensitive data, emphasizing the need for robust security protocols to protect customer information. As the investigation unfolds, users are advised to monitor their accounts and be vigilant for any unusual activity.

Oct 31, 2026

Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

The Hacker News

Chainalysis, a blockchain analysis firm, confirmed that it experienced a cybersecurity incident where an external actor accessed some non-sensitive customer data. The company reassured its clients that the breach did not compromise sensitive information such as investigation content, authentication credentials, or session tokens. This incident raises concerns about the security of customer data in the blockchain industry, highlighting the need for firms to strengthen their defenses against unauthorized access. While the exposure of non-sensitive data is less severe than a full breach, it still poses risks, particularly regarding customer trust and potential phishing attempts. Companies in similar sectors should remain vigilant and review their security protocols to prevent similar incidents.

Oct 31, 2026

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

SecurityWeek

Ahmad Umar Agha, a Syrian hacker, has been sentenced to 42 months in prison by a U.S. court after being on the run for over a decade. Agha was involved in cyberattacks that targeted media outlets, businesses, and government entities, all in support of the Assad regime. His activities included various forms of digital harassment and disruption aimed at silencing dissent and promoting pro-government propaganda. This case is significant not only for the legal repercussions for Agha but also for the broader implications it has on international cybercrime and the accountability of individuals engaged in politically motivated hacking. The sentence underscores the U.S. government's commitment to addressing cyber threats and holding perpetrators accountable, regardless of where they operate from.

Oct 31, 2026

Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

The Hacker News

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities in Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities catalog due to reports of active exploitation. One of the vulnerabilities, identified as CVE-2026-111357, has a CVSS score of 8.8 and involves a lack of authentication for a critical function, which could allow attackers to gain unauthenticated root access. This is particularly concerning for organizations using Ivanti's services, as it poses significant risks to their security infrastructure. Companies relying on Ivanti Connect Secure should take immediate action to assess and mitigate these vulnerabilities to protect their systems from potential breaches.

Oct 31, 2026