Rash of New Ransomware Variants Springs Up in the Wild
Enterprise security teams can add three more ransomware variants to the constantly growing list of ransomware threats for which they need to monitor.The three variants — Vohuk, ScareCrow, and...
3Commas denies staff members stole API keys
Crypto trading firm 3Commas has denied its employees' stole user's API keys, claiming that screenshots circulating on social media are fake and urging affected users to file police reports...
Hackers copied Mango Markets attacker’s methods to exploit Lodestar: CertiK
According to a post-mortem analysis provided by CertiK of the $5.8 million Lodestar Finance exploit that occurred on Dec. 10, 5. The hacker burned a little over 3 million in...
Abnormal token price movements on Binance not hack-related, confirms CZ
Crypto exchange Binance began investigating suspicious behavior on its platform after noticing abnormal price movements for certain trading pairs involving Sun Token (SUN), Ardor (ARDR), Osmosis (OSMO), FUNToken (FUN)...
Lodestar Finance exploited in flash loan attack
Arbitrum-based lending protocol Lodestar Finance was exploited in a flash loan attack on Dec. 10. According to Lodestar, the attacker manipulated the price of the plvGLP token before borrowing...
TikTok Banned on Govt. Devices; Will Private Sector Follow Suit?
Texas this week become the fifth US state to ban the TikTok app on government-owned devices over concerns about the social media app harvesting sensitive data from user devices...
3 Ways Attackers Bypass Cloud Security
BLACK HAT EUROPE 2022 – London - CoinStomp. Watchdog. Denonia.These cyberattack campaigns are among the most prolific threats today targeting cloud systems — and their ability to evade detection...
Google: Use SLSA Framework for Better Software Security
Organizations should implement the Supply Chain Levels for Software Artifacts (SLSA) framework when building software to ensure better software security and integrity, advocates Google — after the tech giant...
Iranian APT Targets US With Drokbk Spyware via GitHub
A subgroup of the state-backed Iranian threat actor Cobalt Mirage is using a new custom malware dubbed "Drokbk" to attack a variety of US organizations, using GitHub as a...
