Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

The Hacker News · Monday, 28 September 2026 at 17:42 (2d ago) · Original article ↗

The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the exchange used, Bitget said on Monday.

The attacker exploited the flaw to obtain high-level internal credentials and then, on September 24, used them to send fraudulent withdrawal commands to Bitget's wallet system.

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Attackers have been exploiting critical Zimbra flaw to steal emails

A simple email gives the attackers the ability to remotely inject OS commands.

Ars Technica 4h ago

Security

Russian state hackers use new RedFlick technique to push malware

The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor. [...]

BleepingComputer 4h ago

Security

DIVD says Zammad zero-days enabled AI-driven network breach

The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. [...]

BleepingComputer 5h ago

Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

More Security & Privacy

Attackers have been exploiting critical Zimbra flaw to steal emails

Russian state hackers use new RedFlick technique to push malware

DIVD says Zammad zero-days enabled AI-driven network breach