North Korean hackers executed the largest cryptocurrency theft in history by compromising Binance through a fake job interview, while OpenAI and Glean preview a privacy-first AI approach, NVIDIA accelerates semiconductor manufacturing with AI, and Qodo launches a cross-repository code review plugin for Codex.
Listen to today’s briefing (podcast)
Key takeaways
Binance lost $6.34 billion to North Korean hackers who used a fake job interview to plant malware via a tampered Homebrew installation.
OpenAI’s Private Intelligence preview with Glean keeps customer data encrypted and stored in customer-controlled infrastructure.
NVIDIA’s cuDSS, PhysicsNeMo, and Omniverse libraries are delivering 10x to 35x simulation speedups for semiconductor fab partners.
Qodo’s new Codex plugin automates cross-repository code reviews with company-specific context to catch critical bugs before deployment.
Binance North Korean Hackers Fake Job Interview $6.3B Theft
Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that compromised the company’s wallet infrastructure and stole about $6.34 billion in digital assets, according to BleepingComputer. The FBI attributed the attack to North Korean state-sponsored hackers known as TraderTraitor, also tracked as Lazarus Group, Jade Sleet, and APT38, BleepingComputer reports.
The attack began in September when a software engineer was contacted through a legitimate job-hunting platform by someone impersonating a Project Director at a fictitious company, BleepingComputer notes. During a second interview, the employee was instructed to download a coding assignment from an online code repository that contained malicious code which compromised the device with previously unseen custom malware that antivirus software did not detect, BleepingComputer says.
The malware replaced a legitimate Homebrew development tool component with a malicious version to execute commands and establish communication with an attacker-controlled server, Binance explained to BleepingComputer. By October 20, attackers used the compromised engineer’s computer and an internal AI tool to compromise two additional employees working on wallet infrastructure, obtaining credentials and a container deployment token, BleepingComputer reports. On October 29, hackers used stolen credentials to access Binance’s wallet signing service and transferred billions across multiple blockchains, abusing Ethereum’s EIP-7702 authorization mechanism to continue stealing after withdrawals were suspended, BleepingComputer adds.
As of November 3, approximately $2.85 billion in stolen assets had been frozen or intercepted, while 98% of impacted token assets had been replenished as of October 31, BleepingComputer states. Binance said the record-setting theft was the culmination of a “sophisticated, multi-stage campaign” involving a tampered Homebrew installation and recruitment-themed social engineering targeting two engineers, The Hacker News reports. The exchange faced at least 57 suspected attacks from North Korea, reflecting the “persistent threat posed by state-sponsored actors targeting the cryptocurrency industry,” TechCrunch notes.
Why it matters: This record-breaking heist demonstrates how state-sponsored actors combine social engineering, zero-day malware, supply chain compromise, and internal tool abuse to bypass layered defenses, underscoring the need for robust endpoint detection, credential hygiene, and continuous attack path validation.
OpenAI Private Intelligence Preview Glean Customer Data Control
Glean has been working closely with OpenAI on the private safety processing preview, according to a YouTube video from OpenAI. Glean sees the willingness of the OpenAI team to take on the hard work to preserve the privacy guarantees that Glean needs, the video states.
Why it matters: This preview signals that enterprise AI can meet strict data sovereignty and compliance requirements by keeping customer data encrypted and in customer-controlled storage rather than absorbed into a vendor’s training corpus.
NVIDIA AI Semiconductor Fab Engineering Acceleration Chip Complexity
Demand for advanced chips is rising, processes to build them are getting more complex, and the margin for error is shrinking, NVIDIA’s newsroom reports. Physical experiments on a fab line are slow and expensive; a wrong call on yield or process quality has real consequences, NVIDIA notes.
Using the NVIDIA cuDSS library, multiphysics software provider COMSOL is accelerating simulations for semiconductor manufacturing by up to 10x, NVIDIA says. Applied Materials and NVIDIA are collaborating to accelerate atomic-scale materials discovery and process development; Applied’s Ginestra simulation platform runs up to 10x faster with cuDSS, and its ACE+ multiphysics platform delivers topography simulations up to 35x faster with NVIDIA PhysicsNeMo, NVIDIA reports.
Siemens is integrating NVIDIA cuLitho into its Calibre lithography software, delivering up to 17x acceleration on key simulation workloads for computational lithography, NVIDIA states. Lam Research demonstrated that the NVIDIA PhysicsNeMo framework can predict plasma behavior in milliseconds, compared with days for a full simulation, NVIDIA adds. Advantest is using NVIDIA NeMo Switchyard AI agents to automate AI model selection for test tasks, reducing response times from hours to minutes, NVIDIA notes.
Applied Materials uses NVIDIA Omniverse libraries to build physically accurate digital twins of entire fabs, enabling simulation of material movement, bottleneck identification, and layout evaluation, NVIDIA says. The AI-defined fab concept connects accelerated computing, physics-based AI, AI agents, and digital twins to help engineers optimize processes, catch problems earlier, and make better decisions across the full manufacturing chip lifecycle, NVIDIA explains.
Why it matters: AI-accelerated simulations and digital twins reduce semiconductor development cycles and enable more complex chip designs that drive next-generation computing infrastructure.
Qodo Codex Plugin Cross-Repository Code Review Company Context
Qodo works closely with Codex and provides the context for review, making sure you’re looking at software as a whole no matter what, even if it’s on two different git providers, according to a YouTube video. Qodo will make that connection and will help Codex to look at the software as a whole and not miss those P0 bugs that you then wake up at 2 a.m. for, the video states.
A lot of developers who have been using Codex and Qodo really want to automate the process of not only building new features, but automatically resolving any bugs, the video notes. That should be a loop that is just happening automatically instead of people manually invoking different agent skills, the video adds. GPT6 is extremely capable, the video mentions.
The goal is for the coding agent to talk about it, agree, and surface only what they don’t accept, making the whole process overall more efficient while leveraging the best parts of human expertise, the video explains.
Why it matters: This plugin automates cross-repository code reviews with company-specific context, reducing manual overhead and catching critical P0 bugs before they cause outages.
n8n — n8n enables enterprises to build and control AI workflows on their own infrastructure, aligning with the data governance focus of OpenAI’s Private Intelligence preview. Explore n8n’s self-hosted workflow automation platform to build AI agents while keeping full control over your data. Try n8n
Hardware Security Key on Amazon — A hardware security key provides phishing-resistant two-factor authentication to protect accounts from credential theft like in the attack. See current options and reviews on Amazon. View on Amazon
Affiliate disclosure: some links in this description are affiliate links. If you sign up through them, SysArticles may earn a commission at no extra cost to you. We only mention tools that are relevant to the story. As an Amazon Associate I earn from qualifying purchases.
Today’s briefing shows how sophisticated threats continue to evolve while AI tools advance to strengthen both infrastructure and development workflows.
Ali YAZICI is a Senior IT Infrastructure Manager with 15+ years of enterprise experience. While a recognized expert in datacenter architecture, multi-cloud environments, storage, and advanced data protection and Commvault automation , his current focus is on next-generation datacenter technologies, including NVIDIA GPU architecture, high-performance server virtualization, and implementing AI-driven tools. He shares his practical, hands-on experience and combination of his personal field notes and “Expert-Driven AI.” he use AI tools as an assistant to structure drafts, which he then heavily edit, fact-check, and infuse with my own practical experience, original screenshots , and “in-the-trenches” insights that only a human expert can provide.
