Santa and Workshop authors outline defenses against Binance breach

The authors of Santa and Workshop analyze how their security tools could have prevented the recent Binance cryptocurrency breach attributed to North Korea. They explain that while binary authorization and lockdown modes have limits against sophisticated multi-stage attacks using trusted developer tools, specific file access rules, CEL rules, and process annotations can block malicious payloads, protect credential files, and require physical presence for sensitive deployments. Open article →