In March, a North Korean APT siphoned blockchain gaming platform Axie Infinity of $540M.
...moreSummary
Total Articles Found: 12
Top sources:
- Threatpost 12
Top Keywords:
- Hacks: 12
- Vulnerabilities: 8
- Web Security: 5
- Malware: 3
- Breach: 2
Top Authors
- Lisa Vaas: 5
- Tom Spring: 2
- Lindsey O'Donnell: 2
- Nate Nelson: 1
- Yaron Kassner: 1
Top Articles:
- MacOS Zero-Day Allows Trusted Apps to Run Malicious Code
- Kerberos Authentication Spoofing: Don’t Bypass the Spec
- Critical Bug in WordPress Plugins Open Sites to Hacker Takeovers
- Remote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming
- DoorDash Data Breach Impacts Personal Data of Almost 5M Users
- Google Titan Security Key Recalled After Bluetooth Pairing Bug
- Microsoft Signs Malware That Spreads Through Gaming
- MFA Glitch Leads to 6K+ Coinbase Customers Getting Robbed
- SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
- Pro-Trump ‘Gettr’ Social Platform Hacked On Day One
Popular NFT Marketplace Phished for $540M
Twitter Suspends Accounts Used to Snare Security Researchers
Published: 2021-10-18 16:23:21
Popularity: 88
Author: Lisa Vaas
Keywords:
The accounts were used to catfish security researchers into downloading malware in a long-running cyber-espionage campaign attributed to North Korea.
...moreMFA Glitch Leads to 6K+ Coinbase Customers Getting Robbed
Published: 2021-10-01 20:08:23
Popularity: 191
Author: Lisa Vaas
Keywords:
Coinbase suspects phishing led to attackers getting personal details needed to access wallets but also blamed a flaw in its SMS-based 2FA.
...moreSideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’
Published: 2021-09-09 14:30:56
Popularity: 115
Author: Lisa Vaas
Keywords:
Grayfly campaigns have launched the novel malware against businesses in Taiwan, Vietnam, the US and Mexico and are targeting Exchange and MySQL servers.
...moreKerberos Authentication Spoofing: Don’t Bypass the Spec
Published: 2021-08-18 13:19:15
Popularity: 1210
Author: Yaron Kassner
Keywords:
Yaron Kassner, CTO at Silverfort, discusses authentication-bypass bugs in Cisco ASA, F5 Big-IP, IBM QRadar and Palo Alto Networks PAN-OS.
...morePro-Trump ‘Gettr’ Social Platform Hacked On Day One
The newborn platform was inundated by Sonic the Hedgehog-themed porn and had prominent users' profiles defaced. Next, hackers posted its user database online.
...moreMicrosoft Signs Malware That Spreads Through Gaming
The driver, called "Netfilter," is a rootkit that talks to Chinese C2 IPs and aims to spoof gamers' geo-locations to cheat the system and play from anywhere, Microsoft said.
...moreRemote Attackers Can Now Reach Protected Network Devices via NAT Slipstreaming
Published: 2021-01-27 20:32:55
Popularity: 440
Author: Tara Seals
Keywords:
A new version of NAT slipstreaming allows cybercriminals an easy path to devices that aren't connected to the internet.
...moreCritical Bug in WordPress Plugins Open Sites to Hacker Takeovers
Published: 2019-12-13 18:33:39
Popularity: 743
Author: Tom Spring
Keywords:
One flaw found in WordPress plugins Ultimate Addons for Beaver Builder and Ultimate Addons for Elementor is actively being exploited.
...moreDoorDash Data Breach Impacts Personal Data of Almost 5M Users
Published: 2019-09-26 21:34:14
Popularity: 436
Author: Lindsey O'Donnell
Keywords:
Accessed information includes delivery addresses, license numbers, names, phone numbers and more.
...moreMacOS Zero-Day Allows Trusted Apps to Run Malicious Code
Published: 2019-06-03 12:28:42
Popularity: 1233
Author: Tom Spring
Keywords:
Apple 0-Day allows hackers to mimic mouse-clicks to allow malicious behavior on macOS Mojave, despite mitigations.
...moreGoogle Titan Security Key Recalled After Bluetooth Pairing Bug
Published: 2019-05-15 20:01:32
Popularity: 331
Author: Lindsey O'Donnell
Keywords:
Google is offering free replacements for its Titan Security Key after discovering a misconfiguration in its pairing protocols.
...more