Tornado Cash saga left a void, says Chainalysis chief scientist: Finance Redefined
Welcome to Finance Redefined, your weekly dose of essential decentralized finance (DeFi) insights — a newsletter crafted to bring you significant developments over the last week.Chainalysis chief scientist shared...
MEVbots backdoor drains users’ Ethereum funds via arbitrage trading bot
MEV gain, an Ethereum (ETH) arbitrage trading bot built by MEVbots, which claims to provide stress-free passive income, has been actively draining its users’ funds via a fund-stealing backdoor. Arbitrage...
App Developers Increasingly Targeted via Slack, DevOps Tools
Developers are increasingly under attack through the tools that they use to collaborate and to produce code — such as Docker, Kubernetes, and Slack — as cybercriminals and nation-state...
Researchers Uncover Mysterious ‘Metador’ Cyber-Espionage Group
LABSCON – Scottsdale, Ariz. – A new threat actor that has infected a telecommunications company in the Middle East and multiple Internet service providers and universities in the Middle East...
Cyberattackers Compromise Microsoft Exchange Servers via Malicious OAuth Apps
Attackers are deploying malicious OAuth applications on compromised cloud tenants, with the goal of taking over Microsoft Exchange Servers to spread spam.
That's according to the Microsoft 365 Defender Research...
Feds Sound Alarm on Rising OT/ICS Threats From APT Groups
The National Security Administration (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) are warning that there are active, known threats to industrial control systems (ICS) and operational technology (OT) that...
Developer Leaks LockBit 3.0 Ransomware-Builder Code
One problem with running a ransomware operation along the lines of a regular business is that disgruntled employees may want to sabotage the operation over some perceived injustice.
That appears...
Malicious npm Package Poses as Tailwind Tool
A malicious package in the npm open source code repository is hitching a social engineering ride on the "Tailwind" legitimate software library tool, which millions of application developers use...
Tribe DAO votes in favor of repaying victims of $80M Rari hack
After months of uncertainty, the Tribe DAO has passed a vote to repay affected users of the $80 million exploit on decentralized finance (DeFi) platform Rari Capital’s liquidity pools.Following...
Crypto bug bounty platform Immunefi raises $24M led by Framework Ventures
Web3 bug bounty and security services platform Immunefi has closed a $24 million Series A funding round, putting the company on track to scale its in-house capacity amid widespread...
