Security guide urges phishing-resistant MFA after Binance's $6.34B theft and PHP2Shell flaw

Jack Cable's security guide argues that recent incidents stem from long-known weaknesses, not novel techniques. The Binance theft began with malware from a fake job interview and tampered installer, exposing a deployment token that reached the wallet signing service. Other events include the PHP2Shell flaw affecting roughly 70% of websites, a malicious Claude Code Cursor extension installed by fewer than 5,000 users, and eMudhra's certificate authority using the number 4 as its private key. Recommended immediate steps include phishing-resistant MFA, secret scanning, and 7-day package age minimums.

✨ AI summary of the linked source — not editorial content.

Explore the topic

• Binance
• Guide
• BNB
• Security