Technology

Cyberattacks on fridges, Binance and Ukraine's alert app raise hacking concerns

The Guardian reports that a $6.3bn Binance heist, a fake Kyiv nuclear alert and fridge attacks are fuelling concern over AI-era hacking.

Published Nov 8, 2026 · 19:05 UTC1 reports

The short version

On 30 October, Binance was robbed of $6.3bn in a record heist, and on 1 November a fake nuclear strike alert reached people in Kyiv.[The Guardian]
Fridge attacks exploited known flaws, including default passwords published in one fridge operator's manuals, according to the NCSC.[The Guardian]
The Binance hack is attributed to North Korea, while one expert says the fridge attacks bear Russian hallmarks, a claim that remains unconfirmed.[The Guardian]
Reported vulnerability discoveries have soared eight-fold since April, and the NCSC says AI-powered malware is highly likely to target UK critical sites by 2028.[The Guardian]

Binance, described as the world's largest cryptocurrency exchange, was robbed of $6.3bn in a record heist on 30 October.[The Guardian]
On 1 November, hackers targeted Ukraine's emergency alert app and sent people in Kyiv a fake nuclear strike alert.[The Guardian]
NCSC director of operations Paul Chichester said fridge hackers did not need AI, because flaws were already public, including default access passwords in one operator's manuals.[The Guardian]
The NCSC said last week that AI-powered malware was highly likely to be used against UK power stations, airports and hospitals by 2028.[The Guardian]
Since April, when Anthropic released its Mythos model, vulnerabilities found by leading tech companies have soared eight-fold.[The Guardian]
Finland's national cybersecurity centre recorded nearly 21,000 incidents last year, against a population of fewer than 6 million.[The Guardian]

Whether the fridge attacks bear Russian hallmarks is unconfirmed; Xavier Bellekens said he was not certain the groups were Russian.[The Guardian]
Russia is a suspect in the Ukraine alert, but no actor has been established. Basis: Guardian reporting that notes suspicion without confirmation.[The Guardian]
Whether the current wave is unprecedented or cyclical is disputed; Ciaran Martin pointed to earlier threats such as NotPetya and WannaCry.[The Guardian]

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.