The cryptocurrency exchange Bybit has suffered a $1.46 billion theft from one of its Ethereum cold wallets in a “sophisticated” attack, marking the largest ever crypto heist. Reports suggest that the North Korea-based Lazarus Group is responsible for the theft. All other Bybit cold wallets are reportedly secure, and the case has been reported to authorities.

IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,