Curve Finance exploit: Experts dissect what went wrong
Decentralized finance protocols continue to be targeted by hackers, with Curve Finance becoming the latest platform to be compromised after a domain name system (DNS) hijacking incident.The automated market...
Software Development Pipelines Offer Cybercriminals ‘Free-Range’ Access to Cloud, On-Prem
Continuous integration/continuous development (CI/CD) pipelines may be the most dangerous potential attack surface of the software supply chain, researchers say, as cyberattackers step up their interest in probing for...
Russia-Ukraine Conflict Holds Cyberwar Lessons
The online attacks against infrastructure and information operations used by both sides in the conflict between Russia and Ukraine fulfill the definition of cyberwar and hold lessons for governments...
Treasury Department sanctions cryptocurrency ‘mixer’ Tornado Cash
Written by Tonya Riley Aug 8, 2022 |...
10 Malicious Code Packages Slither into PyPI Registry
Administrators of the Python Package Index (PyPI) have removed 10 malicious software code packages from the registry after a security vendor informed them about the issue.The incident is the latest...
SBOM formats SPDX and CycloneDX compared
Software bills of materials (SBOMs) are becoming a critical component of vulnerability management. Many organizations, however, are still wrestling with understanding fundamental topics in the SBOM discussion, such as...
Once hacked for $77M, Beanstalk’s algo stablecoin protocol relaunches
Ethereum-based algorithmic stablecoin project Beanstalk Farms has relaunched its protocol just under four months after going offline after suffering a devastating $77 million governance exploit.The protocol and its governance...
Cross chains, beware: deBridge flags attempted phishing attack, suspects Lazarus Group
Cross-chain protocols and Web3 firms continue to be targeted by hacking groups, as deBridge Finance unpacks a failed attack that bears the hallmarks of North Korea’s Lazarus Group hackers.deBridge...
Finance Redefined: Solana and Nomad bridge fall prey to exploits losing millions
Welcome to Finance Redefined, your weekly dose of essential decentralized finance (DeFi) insights — a newsletter crafted to bring you significant developments over the last week.This past week, the...
Fresh RapperBot Malware Variant Brute-Forces Its Way Into SSH Servers
Tracked by analysts since mid-June, RapperBot malware has spread through brute-force attacks on SSH servers. The IoT botnet targets devices running on ARM, MIPS, SCARC, and x86 architectures, researchers...