In a stunning development that echoes the recent tumult in the cryptocurrency market, the Securities and Exchange Commission (SEC) has charged the co-founders of HyperFund, Xue Lee and Brenda Chunga, with orchestrating a fraudulent pyramid scheme. This high-profile case has sent shockwaves through the crypto community, as it involves an alleged $1.7 billion taken from […]
GitLab, a cornerstone of the DevSecOps ecosystem, is urging users to take immediate action following the discovery of a critical security vulnerability that could lead to zero-click account hijacking. This vulnerability, identified as CVE-2023-7028, has been given the highest severity score of 10/10, indicating the potential for severe impact on affected systems. The Crucial Role […]
Citadel.one, a prominent player in the cryptocurrency management space, recently fell victim to a significant security breach on the Arbitrum network. The incident, which underscores the persistent cybersecurity challenges within the blockchain industry, led to the loss of approximately $93,000. Background Information Citadel.one offers a suite of tools for cryptocurrency portfolio management, allowing users to […]
Interoperability service Socket and its bridging platform Bungee have recently restarted operations following a significant security breach that led to an exploit amounting to approximately $3.3 million. This incident has once again brought to the forefront the persistent security challenges that cross-chain bridges in the cryptocurrency industry face. An Unwelcome Attack on Wallets The exploit […]
TLDR; Security researchers have identified two malicious npm packages, warbeast2000 and kodiak2k, designed to exfiltrate SSH keys from developers’ systems. These packages utilized GitHub repositories to store the stolen SSH keys, encrypted in Base64. A staggering 1300% increase in malicious packages on open-source package managers has been reported from 2020 to the end of 2023. In a concerning trend for […]
TLDR; Vladimir Dunaev, a 40-year-old Russian national, has been sentenced to over five years in prison for his role in developing and deploying the TrickBot malware, which caused significant financial damage globally. TrickBot, initially a banking Trojan, evolved to facilitate ransomware attacks, impacting hospitals, schools, and businesses with tens of millions of dollars in losses. The U.S. Department of […]
TLDR; Southern Water, a major UK water supplier, confirms a data breach after the Black Basta ransomware group claims responsibility. Black Basta threatens to release 750GB of sensitive data, including identity documents and personal information. Southern Water assures that customer services are not affected, and an investigation with cybersecurity specialists is underway. The breach highlights the growing cyber-threat to critical infrastructure […]
In a groundbreaking move, the U.S. government has announced plans to auction off a substantial amount of Bitcoin, valued at approximately $130 million. This significant cache of cryptocurrency was seized in connection with the notorious Silk Road online marketplace, which was shut down by federal authorities in 2013. The Bitcoin for sale was confiscated from various individuals associated with the Silk Road, […]
In a startling breach of digital security, the email marketing platform MailerLite has been compromised, leading to a sophisticated phishing campaign that drained over $600,000 in cryptocurrency from unsuspecting victims’ wallets. The attack targeted users of several high-profile cryptocurrency services, exploiting the trusted communication channels established by these platforms. MailerLite, known for its email marketing […]
In the vast ecosystem of Windows applications, OneLaunch has emerged as a controversial figure, stirring debates among users and IT professionals alike. Marketed as a productivity tool designed to enhance the Windows desktop experience, OneLaunch has found itself at the center of discussions regarding its legitimacy, safety, and overall utility. This article delves into the […]