Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۳:۵۹

Fake job interview opened the door to $6.34 billion Binance heist

A tampered software installer and a fake job interview gave attackers the access they needed to steal about $6.34 billion in digital assets from Binance. “It was not a single isolated breach or a simple phishing incident,” Binance wrote in its incident report. “The attackers combined a range of techniques, including social engineering by fake recruitment interviews, malicious software downloads, compromised internal…

Phishing Data Breach

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۴:۴۸

Poisoned cPGuard update hits thousands of web hosting servers

An attacker has compromised the update infrastructure of cPGuard, a security suite for Linux web hosting servers, and pushed out a malicious update to nearly 3,000 customer servers. OPSShield, the company behind the security suite, also confirmed that the attacker made off with customer contact information and hashed passwords from the firm’s billing and licensing server. How the attack unfolded The attacker uploaded…

Supply Chain Security Operating Systems

Source

SecurityWeek چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۴:۲۴

Malicious cPGuard Updates Served in OpsShield Supply Chain Attack

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions. The post Malicious cPGuard Updates Served in OpsShield Supply Chain Attack appeared first on SecurityWeek.

Data Breach Supply Chain Security

Source

Industrial Cyber چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۴:۱۳

NCSC Annual Review 2026 warns AI-powered malware could target UK critical infrastructure by 2028

The U.K.’s critical national infrastructure should prepare for ransomware attacks involving artificial intelligence-powered malware by 2028, according to... The post NCSC Annual Review 2026 warns AI-powered malware could target UK critical infrastructure by 2028 appeared first on Industrial Cyber.

Malware & Threats Vulnerabilities & Zero-Day Phishing

Source

CERT-Bund چهارشنبه ۱۳ آبان ۱۴۰۵ · ۱۲:۵۹

[NEU] [hoch] Google Chrome: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um möglicherweise beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren, einen Denial-of-Service-Zustand auszulösen, Spoofing-Angriffe durchzuführen oder andere, nicht näher spezifizierte Angriffe auszuführen.

Phishing

Source