Fake Zoom Meeting Leads to $13 Million Crypto Theft in Venus Protocol Social Engineering Attack
TL;DR A crypto user lost approximately $13 million after being lured into a fake Zoom meeting via Telegram Attackers gained […]
North Korean Hackers Infiltrate Crypto Firms With Fake Identities — How to Protect Your Organization
Changpeng Zhao, the founder of Binance and one of the most influential figures in the cryptocurrency industry, issued a stark
Chrome Zero-Day CVE-2025-10585 Exploited in the Wild: What Crypto Users Need to Know About Browser Security
Google released an emergency Chrome update on September 18, 2025, patching a critical zero-day vulnerability tracked as CVE-2025-10585 that was
Cross-Chain Bridge Security Best Practices After the Polkadot Hyperbridge $237K Exploit
The cryptocurrency industry suffered another reminder of the fragility of cross-chain infrastructure when a sophisticated attacker exploited a critical vulnerability
Securing Your Browser Against Zero-Day Exploits: A Practical Framework for Crypto Users
The discovery of CVE-2025-10585—a type confusion vulnerability in Google Chrome’s V8 JavaScript engine that was actively exploited in the wild—serves
Ethereum Fusaka Audit Contest Launches on Sherlock With 2X Bounty Multiplier For Early Findings
The Ethereum Foundation launched a high-stakes audit contest for the Fusaka upgrade on September 15, 2025, enlisting the global security
Protecting Developer Infrastructure: Security Best Practices After the Shai-Hulud npm Worm Attack
On September 14, 2025, the Node Package Manager ecosystem was hit by one of the most sophisticated supply chain attacks
Code Editor Security After WhiteCobra: A Practical Guide to Extension Verification
The cryptocurrency development ecosystem faced a stark reminder of supply chain vulnerabilities in September 2025, when a threat group known
The NPM Supply Chain Attack That Exposed 10% of the Cloud: Security Best Practices
The cryptocurrency and broader technology world is confronting uncomfortable truths about software supply chain security after one of the most
GoAnywhere MFT Zero-Day Exploited by Storm-1175 in Medusa Ransomware Campaign
A critical zero-day vulnerability in Fortra’s GoAnywhere Managed File Transfer platform came under active exploitation by the threat group tracked