CyberInsider جمعه ۸ آبان ۱۴۰۵ · ۰۹:۰۷

Binance links $6.3 billion security incident to compromised laptop

Binance says a compromised DevOps engineer’s laptop may have enabled an attacker to submit unauthorized withdrawals in a security incident with an estimated impact of $6.3 billion. The cryptocurrency exchange says it has frozen approximately $3 billion in affected assets on-chain and pledged to cover all losses. Withdrawals remain suspended while Binance overhauls its withdrawal … The post Binance links $6.3 billion…

دواپس و زیرساخت

خواندن متن کامل در CyberInsider درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Help Net Security جمعه ۸ آبان ۱۴۰۵ · ۱۱:۵۶

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record

About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions,” the exchange said in a security update published early on October 30. T…

نشت داده امنیت ابری دواپس و زیرساخت

منبع

CSO Online جمعه ۸ آبان ۱۴۰۵ · ۱۱:۵۵

Beyond deterministic worms: Preparing the SOC for reasoning adversaries

In May 2017, the WannaCry cryptoworm spread across the internet, compromising more than 200,000 computers in at least 100 countries. The National Audit Office called it the largest cyberattack ever to hit the NHS in England. At least 80 of 236 hospital trusts were infected or disrupted, an estimated 19,000 appointments were cancelled, five hospitals diverted ambulances, and more than 1,200 pieces of diagnostic equipm…

بدافزار و آلودگی آسیب‌پذیری و روز صفر امنیت هوش مصنوعی

منبع

Tenable Blog جمعه ۸ آبان ۱۴۰۵ · ۰۵:۱۲

php2shell one week later: Why one exploit doesn’t work everywhere

php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the exception: one tuned exploit can reach every device that runs it.Key takeawaysThe five vulnerable PHP sites we exposed to the internet were not compromised, and public proofs-of-concept (PoCs…

آسیب‌پذیری و روز صفر امنیت ابری هوش تهدید

منبع

CyberInsider پنجشنبه ۷ آبان ۱۴۰۵ · ۲۰:۲۶

‘SMS of Death’ flaw cuts off Android calls without user interaction

A malformed text message can silently crash Android’s telephony service and disconnect calls, including emergency calls. Repeated delivery can leave affected phones unable to maintain cellular service even after restarting. Independent researcher Mark Blaszczyk published the findings on October 29, nearly six months after reporting the issue to Google. His disclosure says Google ultimately classified … The post ‘SMS…

توسعه موبایل

منبع