Tech • IA • Crypto
50 articles analyzed by AI / 174 total
Injective Labs' GitHub repository was compromised by hackers who published a malicious npm package (@injectivelabs/[email protected]) designed to steal cryptocurrency wallet private keys and seed phrases, affecting users who installed the package.
CISA detailed security lapses that caused a leak of passwords and cloud access keys on GitHub, emphasizing supply chain and access management vulnerabilities. The incident occurred on April 27, 2024, with recommendations for corrective measures.
Progress warned ShareFile customers to immediately shut down Storage Zone Controllers due to a critical security threat that could expose their data to cyberattacks. This urgent advisory affected many users reliant on this file-sharing infrastructure.
Progress Software urged ShareFile customers to shut down Windows servers hosting Storage Zone Controllers following a credible external security threat, temporarily disabling access to prevent data breaches.
Security researchers at Binarly discovered six new severe security flaws in U-Boot, used in many devices like routers, cameras, and servers. Some vulnerabilities could crash devices while others allow attackers to execute malicious code during device startup.
The new MODBEACON Remote Access Trojan (RAT) was identified using gRPC streaming for encrypted command and control communications, showing advanced evasion techniques in malware operations.
A cybersecurity negotiator was sentenced to 70 months in prison for assisting the BlackCat ransomware group with targeting and extorting victims. This insider threat was reported on April 27, 2024, highlighting criminal collaboration within cybersecurity.
A hacker server leak exposed the WP-SHELLSTORM backdoor, compromising thousands of WordPress sites and indicating a significant widespread security breach affecting over 1.4 million websites.
Threat actor O-UNC-066 used fake voice-based Microsoft Entra passkey enrollment requests to trick Microsoft 365 users into enabling malicious credentials, aiming to perform data extortion attacks across multiple sectors.
Attackers exploited the 'Ill Bloom' vulnerability in cryptocurrency wallet recovery phrase generation, resulting in over $3.1 million in losses due to weak randomness allowing wallet draining.