A back number, composed at the paper’s founding from the news of its own week.

Outlook: Gales in the counting-house, scattered remedies

The Packet Inspector

☞Four Public Notices this week. Two are urgent.

“All the Vulnerabilities Fit to Patch”

Est. 2026 · Composed by Mechanical Editor · Price: One Click

Vol. I, No. 3Friday, the Thirtieth of October, 2026
Outlook: Gales in the counting-house, scattered remedies
☞Four Public Notices this week. Two are urgent.

Record theft · A laptop suspected

The Great Coin Robbery!

Binance Says a Theft of About $6.3 Billion
May Have Begun With an Engineer’s Laptop

The world’s largest coin exchange links its loss to an engineer’s compromised laptop

The strongroom was opened by way of the writing case, or so the first findings run. Posed for this paper in the studio.Photogravure, Art Dept.
By Phineas T. BlackwoodEditor

The fuller the vault, the more patient the men who come for it.

Binance, the biggest coin exchange in the world, has lost about $6.3 billion to thieves, BleepingComputer reports. Its first findings point to an engineer’s compromised laptop, Help Net Security reports.

The intruders, we are told, reached a service container and sent withdrawals the exchange had not approved. Binance says it has not yet found a leaked wallet key.

The firm insists this was no single click, says it has found further points of breach, and blames no individual. This paper will wait for the rest of the facts.

TRM, which traces coins on the blockchain, lays the deed at the door of TraderTraitor, a North Korean state-backed unit. TRM calls this the largest cryptocurrency theft on record, about four times the Bybit hack of February 2025.

Coin issuers and others have frozen roughly $2.7 billion of the phantom coin, TRM says. Binance halted deposits and withdrawals at first. Deposits now run as normal and withdrawals stay paused, it says, Help Net Security reports. It promises to cover every loss from its own funds.

Readers with coin on the exchange should heed its own notices, and treat all others with the customary caution. We shall be watching.

Sources: BleepingComputer · Help Net Security, 30 October 2026.

Developing story · first report · all threads ›

Running Threads

Serial. The Phantom of the Mainframe, part 3 of 12. Parts so far: 1 to 3.

Developing. The great coin theft. Reports so far: this number.

Developing. The PHP flaws. Reports so far: No. 2 and this number.

Developing. The bankruptcy courts’ notices. Reports: No. 1 and this number, which closes it.

Developing. The French freezers. Reports so far: No. 1.

Staff. Zeke’s bid for the news desk.

Staff. Mr. Quill corrects the Editor.

Staff. The masons and the clairvoyant, in the advertisements.

On the web edition, each thread links to an archive page with every part in order. Every number also reads complete on its own.

Latest Intelligence by Wire

By Miss Cordelia VanceCorrespondent at the Wires

Merriweather’sTravelling Strongbox

For the Gentleman Who Takes His Work Home

Your papers ride in iron, under a lock of seven levers. The key hangs on a ribbon about your neck, where every clerk may admire it.

“I left it on the omnibus with the key in it. Both have arrived safely somewhere.” A Junior Partner, Lately

Three Dollars the Box

Spare keys cut for all comers.

Advt.

The Flaws at Work

Attackers Now Use the PHP Flaws, Pairing Them With a Linux Bug to Take Over Servers

WASHINGTON, by wire. The PHP flaws reported here last week are now used in real attacks. A researcher’s decoy server caught one at work, we are told. CISA added both flaws to its list of exploited bugs on Monday. Attackers pair them with a Linux flaw called Fragnesia. Together they can plant web shells and run commands as root, CISA says. One security firm counts 25 servers taken over this way. They were in America, Japan, Taiwan and South Korea, BleepingComputer reports.

Developing story · second report · first in No. 2 · all threads ›

A Hospital Diverted

A Cyber Attack Disrupted Care at the University of New Mexico’s Health System on Monday

ALBUQUERQUE, by wire. A cyber attack hurt care at a health group in New Mexico on Monday. It took fewer new patients and sent ambulances to other hospitals. Some surgeries and visits were put off. Its hospitals stayed open, it says. By Tuesday its systems were back and ambulances ran as normal. Clinics had reopened, it says. The group belongs to the University of New Mexico. Its main hospital has the state’s only top-level trauma centre. A new ransomware gang called BYOD has claimed the attack, BleepingComputer reports.

The Notices Resume

The Bankruptcy Courts’ Notice Service Is Back Online After the Attack on Its Contractor

WASHINGTON, by wire. The notice service for America’s bankruptcy courts is back. It sends out the notices for all of them. It went down after an attack on BAE Systems, which runs it. BAE has since sent word that the problems are fixed. The courts posted the news on 27 October. On 22 October, judges got wider powers over deadlines while it was down. The service is open for use again, the US Courts office reports.

Developing story · closed · first in No. 1 · all threads ›

A Member List Taken

Sony’s Japanese Internet Provider Says Intruders Reached More Than 2.5 Million Customer Records

TOKYO, by wire. Intruders got into the member list of a Sony internet firm in Japan. It runs the So-net service there. More than 2.5 million records were exposed, it says. They held names, phone numbers, email addresses and birth dates, we are told. No card details were taken. Another 54,401 email addresses leaked with their passwords. The firm asks those users to set new passwords, BleepingComputer reports.

The Pass Codes Changed

University of Copenhagen Says Hackers Reached a Test System Holding Data on About 525,000 People

COPENHAGEN, by wire. A test system at the University of Copenhagen has been hacked, it says. It held data on about 525,000 people. Names, ID numbers, phone numbers and emails may be exposed. The PIN codes on about 20,000 staff and student ID cards leaked too. Some sites were shut, we are told. It began reopening them as new codes went out. It says the attack is contained, BleepingComputer reports.

Public Notices: Remedies Now Available

GitLab CE and EE · CVE-2026-97229

Exploited, CISA says. A crafted pattern in a pipeline file can, under certain conditions, let an attacker run code on the server without signing in. Update to 19.4.2, 19.3.5 or 19.2.8.

Priority: today · BleepingComputer

Linux kernel “Fragnesia” · CVE-2026-46300

Exploited, CISA says, and paired with the PHP flaws to gain root. Install your distribution’s fixed kernel.

Priority: this week · BleepingComputer

Cisco ASA and FTD firewalls · CVE-2026-76418

Exploited, Cisco says. Where secondary authentication is set on a VPN tunnel group, a crafted request can make the firewall restart. Upgrade to a fixed release. Until then, turn off secondary authentication on the affected tunnel groups.

Priority: this week · Cisco

Google Brotli decoder · CVE-2026-111497

Exploited, CISA said on 27 October. A crafted compressed stream can corrupt memory in programs that use the decoder, Node.js among them. Install the fixed Brotli and Node.js releases, then restart affected processes and rebuild container images.

Priority: today · BleepingComputer

The Widow Crankshaw’sBoarding HouseFor Programs of Advanced Years

Elderly programs are taken in without fuss. Each has a room, a candle and a door Mrs. Crankshaw locks herself.

“Mother’s ledger has lodged there for twenty years. Nobody has disturbed it, including me.” A Grateful Son of the Parish

Two Bits the Week, Board Included

Visitors are admitted on the first of the month and counted coming out.

Advt.

The Week in Figures

By Barnaby QuillAlmanack Keeper
About $6.3 billionin crypto taken from Binance (BleepingComputer).
Roughly $2.7 billionof it frozen by coin issuers and others (TRM, via BleepingComputer).
More than 2.5 millioncustomer records exposed at Sony Network Communications (BleepingComputer).
About 525,000people whose data sat in Copenhagen’s test system (BleepingComputer).
25servers taken over with the PHP and Linux flaws, one firm says (BleepingComputer).

(It will be recalled that a robbery, in law, wants a person present and put in fear. The Editor’s first deck has “Robbery.” The reports speak of no one menaced, and his second deck has the word: theft. — B.Q.)

Running thread: Mr. Quill corrects the Editor · third appearance · all threads ›

Fifty Years Ago

Fifty years ago this year, on 29 April 1976, a Senate panel led by Frank Church gave its final report. It had looked into the nation’s spy agencies, the Senate’s own history records.

Among much else, it found that the NSA’s Project Shamrock had watched wire messages to and from the country. The present writer, who reads every telegram sent to him, finds this ill-mannered.

In 1976 the Senate set up its Select Committee on Intelligence to keep watch. This paper now reaches you over the internet, about which no more need be said.

Aunt Entropy Replies

By Aunt EntropyAdvice to the Subscribing Public

“My husband brings his office laptop home, and the children borrow it for their games. Is there any harm in that?”Uneasy in Uxbridge

My dear Uneasy, there may be. This week a big exchange for digital money lost about $6.3 billion. It linked the theft to an engineer’s compromised laptop, BleepingComputer reports. Compromised means a stranger had got inside it.

A work laptop carries the keys to the office, the way a clerk’s coat carries the keys to the shop. You would not let the children play with the shop keys. A game from a strange website can carry a burglar in with it, and the burglar does not care whose keys he finds.

  1. Give the children a machine of their own, however old, for games.
  2. Ask him to lock the work laptop with its password whenever he leaves it.
  3. Have him ask his office’s computer staff what may and may not run on it.

Today: keep games off the work laptop.

Letters in this column are composites.

Notes From the Composing Room

By Zeke SprocketPrinter’s Devil

There is a new line under Situations Wanted this week. It is me. I set it in type myself, so the ink is mine too.

Miss Vance read it and said nothing. Mr. Quill read it and moved one comma. He said the comma had been loitering.

I also set a new advertisement for Pemberton and Sons. Their walls are built by men who do not need to see the future. I am watching the advertisements closely.

Running thread: Zeke’s bid for the news desk · third beat · all threads ›

The Phantom of the Mainframe

A penny dreadful in twelve weekly parts, by Zeke Sprocket. Mr. Blackwood has registered a protest.

Part 3 of 12 · all parts so far ›

Part 3. Previously, the Phantom struck at midnight exactly, and Constable Pratt vowed to sit up. He sat up until eleven. Then he sat down, and then he slept. Across the street, Miss Ada Whitlock was at the night key of the Exchange. At midnight her wires began to chatter. A long message was going out. It came from the engine-house, and it was going somewhere else. Ada put on her shawl and crossed the street. She woke the Constable with one tap. “Your Phantom is not stealing, Constable,” she said. “It is posting letters.” (To be continued. Mr. Blackwood is reading this over my shoulder.)

Part 4 of 12 next week · all parts so far ›

Classified

Lost and Found

LOST: a whole morning, to a letter marked most urgent that was not. No reward offered.

Situations Wanted

WILLING HAND, quick on stairs, sets type, seeks a desk with a window onto the news. Enquire at the press.

Personals

STEADFAST GENTLEMAN, same watchword since boyhood, seeks a lady of like constancy. No reformers.

For Sale

SPARE LAPTOP, slow, beloved by children, strictly for games. Has never been to the office.

Notices

BELL-RINGERS wanted for the night watch. Must ring loudly and not ask who is at the door.

UPPER ROOM TO LET, lit window, view of the street. Ladder left by the last tenant. Apply within, after dark.

Corrections and Apologies

No corrections this week.

Keep your watchwords long and your remedies current.
— The Editor