Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability

This is a weekly security news roundup that aggregates recent high-impact cyber events and research: active vulnerabilities and exploits (including a Brotli remote OOB write and Oracle EBS CVE being targeted), major data breaches and leaks affecting universities, government and ISP customers, malware campaigns and supply-chain/backdoor compromises (Yoba, Gheist, Claude Code), APT activity targeting critical infrastructure (Volt Typhoon and China-aligned actors), a massive cryptocurrency heist at Binance, and multiple operational-impact incidents involving credential theft, lateral movement, and ransomware.