The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.
Category: Security
Auto Added by WPeMatico
NGRAVE Details $2.56 Million Phishing Attack That Used Fake Wallet Alerts
TL;DR: NGRAVE says attackers hijacked a notification provider used by LIQUID, directing users to a fake recovery-page and stealing at least $2.56 million. A convincing security notification became the entry point for a costly crypto phishing campaign. Hardware wallet maker NGRAVE says a third-party provider used to send LIQUID app alerts was compromised, allowing attackers […]
Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.
Plex Server Exploit Chain Used To Install Monero Mining Malware
TL;DR: Attackers are exploiting a chain of Plex Media Server vulnerabilities to install unauthorised cryptocurrency miners and a Linux proxy backdoor on vulnerable systems. The latest cryptojacking warning comes from an unexpected direction: home and business media servers. Security researchers have observed attackers chaining multiple weaknesses in Plex Media Server to run software on machines […]
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
A judge ordered Abdulrahman Alfozan to remain in custody, likening the Saudi government’s offer to secure the former OpenAI engineer’s release to a “blank check.”
Crypto Hacks Cost $1.18 Billion In Q3 As Smart Contract Exploits Surge
Crypto’s third-quarter security bill came to $1.18 billion, but the headline total is only part of Hacken’s latest warning. The firm recorded 107 incidents between July and September, with smart-contract exploits taking a much larger share of losses than they did three months earlier. TL;DR: Hacken reported $1.18 billion stolen across 107 incidents in Q3 […]
Ledger Reseller Attack Raises Questions About Hardware Wallet Supply Chains
A hardware wallet’s strongest cryptography offers little protection when an attacker can interfere with the device before its owner even switches it on. That is the uncomfortable lesson from the CryptoBilis case now facing Ledger customers in Southeast Asia. TL;DR: Investigators have linked roughly $90 million or more in reported crypto losses to tampered wallet […]
Cysic Bridge Exploit Creates 10 Million Tokens Before $727,000 Moves To Ethereum
Cysic has suspended its cross-chain bridge after an attacker created 10 million unauthorized CYS tokens on BNB Chain and converted part of the supply into assets moved toward Ethereum. TL;DR: On-chain analysis traced the sale of about 7.2 million CYS and the receipt of 306.6 ETH, valued at roughly $727,000 at the time. The bridge […]
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.