A compromised DevOps laptop caused the $6.3B Binance breach

Cryptocurrency Exchange Binance blamed a compromised DevOps laptop for the loss of $6.3 billion in cryptocurrency last week, adding that it will now cover any losses faced by its customers. “Binance will cover all losses from the Secure Assets Fund for Users (SAFU) and the company’s funds,” the world’s largest cryptocurrency exchange said in an update on Friday, adding that user funds are safe and that it had found n…

آسیب‌پذیری و روز صفر نشت داده امنیت ابری هوش تهدید دواپس و زیرساخت بلاک‌چین و وب۳
خواندن متن کامل در CSO Online درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Industrial Cyber

NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems

The U.S. National Institute of Standards and Technology (NIST) rolled out a finalized report to help organizations transition... The post NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems appeared first on Industrial Cyber.

CyberInsider

SPECTER attack leaks air-gapped data through USB power controls

Researchers have demonstrated a covert channel called SPECTER that can leak secrets from air-gapped computers by manipulating USB power-management and device-state controls, without carrying the stolen information in USB data transfers. The technique requires an already compromised computer with administrator or root privileges. An attacker recovers the information by observing a connected smartphone’s charging statu…

Trail of Bits

Backporting security fixes at scale with Codex

Stable Linux releases lack existing security fixes because backporting them is time-consuming and often thankless work. We’re using Codex to reduce the backporting process time from days to hours per fix, empowering human patch reviewers to rapidly submit fixes for critical software like Ubuntu Long Term Support, Fedora, and the Linux kernel. By October 29, our project helped deliver fixes for 149 distinct CVEs into…

Help Net Security

Chainalysis breached using “offensive agentic techniques”

Blockchain analytics firm Chainalysis has suffered a cybersecurity incident that led to a data breach. According to the company’s Friday announcement, the incident is unrelated to the recent Binance hack. What was accessed? In October, the company detected external attackers using “offensive agentic techniques” to gain access to Chainalysis systems and internal tools. “Based on the evidence available to date, we have…