Microsoft Squashes Zero-Day, Actively Exploited Bugs in Dec. Update
Microsoft has released fixes for 48 new vulnerabilities across its products, including one that attackers are actively exploiting and another that has been publicly disclosed but is not under...
Prevent Secret Leaks: Find and Secure Secrets Across Your Repositories and Pipelines
Developers use secrets to enable their applications to securely communicate with other services. Hardcoding credentials (like usernames and passwords) simplifies development and saves time. Unfortunately, version control systems (VCS)...
Hackers Score Nearly $1M at Device-Focused Pwn2Own Contest
Security researchers and hackers demonstrated 63 zero-day vulnerabilities in popular devices at the latest Pwn2Own, exploiting printers from Canon, HP, and Lexmark, and routers and network-attached storage device from...
Security Flaw in Atlassian Products Affecting Multiple Companies
BENGALURU, December 13, 2022 — Researchers at CloudSEK observed that for Atlassian products - Jira, Confluence, and BitBucket, cookies are not invalidated, even if the password is changed, with...
Hackers copied Mango Markets attacker’s methods to exploit Lodestar — CertiK
Blockchain security company CertiK has shared a post-mortem analysis of the $5.8 million Lodestar Finance exploit that occurred on Dec. 10:5. The hacker burned a little over 3 million...
Metaparasites & the Dark Web: Scammers Turn on Their Own
Cybercriminals are often seen as parasites, feeding off a wide swath of victims of every size and stripe. But as it turns out, they've become targets in their own...
Rash of New Ransomware Variants Springs Up in the Wild
Enterprise security teams can add three more ransomware variants to the constantly growing list of ransomware threats for which they need to monitor.The three variants — Vohuk, ScareCrow, and...
3Commas denies staff members stole API keys
Crypto trading firm 3Commas has denied its employees' stole user's API keys, claiming that screenshots circulating on social media are fake and urging affected users to file police reports...
Hackers copied Mango Markets attacker’s methods to exploit Lodestar: CertiK
According to a post-mortem analysis provided by CertiK of the $5.8 million Lodestar Finance exploit that occurred on Dec. 10, 5. The hacker burned a little over 3 million in...
Abnormal token price movements on Binance not hack-related, confirms CZ
Crypto exchange Binance began investigating suspicious behavior on its platform after noticing abnormal price movements for certain trading pairs involving Sun Token (SUN), Ardor (ARDR), Osmosis (OSMO), FUNToken (FUN)...
