A cyber expert says Binance's own AI tools became part of a $6.3 billion hack, exposing risks from fake interviews and workplace AI security failures.
With no guide to identify, prevention is key Cyber expert Ori Segal notes the difficulty for companies to prevent sophisticated AI-driven attacks or train employees to recognize fake interviews, as there's no clear roadmap. He advises minimizing pressure for results, verifying if tasks truly require specific devices, and using disposable virtual machines for any unvetted third-party code to neutralize potential threats. Luring employees with job interviews also a key vulnerability Segal identifies job interviews as a critical vulnerability. Employees engaged in job hunting might hesitate to report security breaches on company devices, fearing disclosure to their current employer. He suggests companies proactively communicate that reporting such incidents, even if related to a job search, will not lead to punishment, encouraging earlier and more complete disclosure. How did the attack happen According to Binance's report, hackers compromised two software engineers' computers through a bogus job interview and malicious software hidden in an advertisement. A third engineer's computer was then exploited to drain approximately $6.3 billion in cryptocurrency. The attack was a multi-stage effort that started in June and persisted for several hours even after detection.
With no guide to identify, prevention is key
Cyber expert Ori Segal notes the difficulty for companies to prevent sophisticated AI-driven attacks or train employees to recognize fake interviews, as there's no clear roadmap. He advises minimizing pressure for results, verifying if tasks truly require specific devices, and using disposable virtual machines for any unvetted third-party code to neutralize potential threats.
Luring employees with job interviews also a key vulnerability
Segal identifies job interviews as a critical vulnerability. Employees engaged in job hunting might hesitate to report security breaches on company devices, fearing disclosure to their current employer. He suggests companies proactively communicate that reporting such incidents, even if related to a job search, will not lead to punishment, encouraging earlier and more complete disclosure.
How did the attack happen
According to Binance's report, hackers compromised two software engineers' computers through a bogus job interview and malicious software hidden in an advertisement. A third engineer's computer was then exploited to drain approximately $6.3 billion in cryptocurrency. The attack was a multi-stage effort that started in June and persisted for several hours even after detection.
