Bitget hacked via zero-day in third-party security products

By Sergiu Gatlan

AI Summary

Cryptocurrency exchange Bitget disclosed that attackers stole $387.5 million by exploiting a zero-day vulnerability in unspecified third-party security products used in its infrastructure. The breach, revealed on September 30, underscores supply-chain risk in the security tooling layer itself. No CVE or vendor name was disclosed, but the incident is one of the largest crypto exchange hacks of 2026.

Read full article → https://www.bleepingcomputer.com/news/security/bit…

Relevance score: 85.0/100

# More from October 01

1
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution The Hacker News
2
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected CyberScoop
3
Cisco warns of new SD-WAN zero-day exploited in attacks BleepingComputer
4
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets The Hacker News
6
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses The Hacker News
7
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT The Hacker News
8
Alleged ShinyHunters leader arrested in the Netherlands CyberScoop
9
Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks SecurityWeek
10
Over 543,000 valid credentials exposed in public GitHub repositories BleepingComputer