Platypus Finance Suffers .23 Million Flash Loan Exploit on Avalanche
The decentralized finance protocol Platypus Finance suffered a devastating flash loan attack on October 12, 2023, resulting in the loss […]
Security
AvosLocker Ransomware Advisory and Crypto Infrastructure Security: A Practical Defense Framework
On October 11, 2023, the Cybersecurity and Infrastructure Security Agency (CISA) released a joint advisory warning about the escalating threat
Critical cURL Vulnerability CVE-2023-38545 Exposes Heap Overflow Risk in SOCKS5 Proxy Handshake
The cybersecurity community faced a significant wake-up call on October 11, 2023, when the maintainers of cURL released version 8.4.0
Nation-State Hackers Exploit Atlassian Confluence Flaw in Sustained Cyber Espionage Campaign
Microsoft has confirmed that a known nation-state threat actor tracked as Storm-0062 has been actively exploiting a critical zero-day vulnerability
Apache ActiveMQ Zero-Day Exploit Deploys Ransomware Across Enterprise Networks
A critical remote code execution vulnerability in Apache ActiveMQ, tracked as CVE-2023-46604, has been actively exploited in the wild since
How LastPass Breach Led to $4.4 Million in Crypto Wallet Drainings
The cascading fallout from the LastPass data breach has emerged as one of the most significant security incidents affecting cryptocurrency
Stars Arena Exploit Exposes Reentrancy Vulnerability on Avalanche Network
The Stars Arena platform, a social decentralized application built on the Avalanche blockchain, suffered a devastating exploit that exposed critical
Hot Wallet Security Best Practices After the HTX and Mixin Network Breaches
The autumn of 2023 brought a sobering reminder of the vulnerabilities inherent in cryptocurrency custody solutions. With the HTX exchange
HTX Exchange Hot Wallet Drained of 4,997 ETH in Private Key Leak Exploit
The cryptocurrency exchange HTX, formerly known as Huobi, experienced a significant security breach on September 25, 2023, when an attacker
Balada Injector Campaign Targets 17,000 WordPress Sites Exploiting Plugin Vulnerabilities
A massive malware campaign known as the Balada Injector compromised more than 17,000 WordPress websites during late September and early