Inside the $6.3bn Binance breach
North Korea-linked hackers reportedly drained Binance in about 20 minutes. Experts explain what went wrong and what it means beyond crypto.
30 results for “crypto”
North Korea-linked hackers reportedly drained Binance in about 20 minutes. Experts explain what went wrong and what it means beyond crypto.
A new P7 DarkSword variant trims its on-device footprint while adding keychain theft, crypto-wallet extraction, and two-way command control.
Attackers are chaining two unpatched AhsayCBS vulnerabilities to gain remote code execution and deploy webshells, with at least five organizations targeted.
Post-quantum key exchange is spreading across top websites, but experts warn edge adoption does not equal enterprise readiness.
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
Raheim Hamilton, co-creator of the dark web's Empire Market, is sentenced to 40 years for facilitating $430 million in illegal transactions.
SecurityForescout found only 6% of IoMT and 16% of medical OT devices run SSH that can move to post-quantum cryptography.
Microsoft's X account with 13 million followers was hijacked to push a Clippy-themed crypto token, and the company has yet to explain how.
A joint advisory links WaterPlum's developer-targeting campaign to over $10.7m in stolen cryptocurrency and 30,000 infected devices worldwide.
A four-nation advisory ties a fake-recruiter hacking crew to North Korea's IT worker scheme and details Japan's first laptop farm takedown.
Google's post-quantum cryptography roadmap accelerates a migration to 2029 and introduces Merkle Tree Certificates, pressuring traditional X.509 infrastructure.
A joint advisory says North Korean recruiters posed as hiring managers, using bogus coding tests to breach 30,000 devices and 7,000 crypto wallets.
FinCEN alerts banks to industrial-scale scam centers in Southeast Asia, with nearly $13 billion lost by Americans since 2023.
NIST deadlines, NSA requirements and harvest-now-decrypt-later risk mean encryption migration planning cannot wait.
CrowdStrike uncovers Brazil-based threat actor Slim Spider stealing cloud credentials to access cryptocurrency custody secrets.
Young scammers' lavish purchases led FBI to suspects in $240M bitcoin theft.
Trezor says a breach at shipping partner ShipMonk now affects 81,000 customers, a 479% jump from initial estimates.
Hackers drain ~95% of Liquid's federation wallet, promise return if bug is fixed, testing sidechain trust.
New research maps North Korea's Lazarus umbrella into six distinct cyber clusters with specialized roles.
Elastic uncovers four REVSTEALER-linked programs that disable Windows Update and Defender to mine crypto.
G7 calls for accelerated post-quantum cryptography transition, warning of near-term threats.
Researchers uncover 13 malicious Packagist packages that inject spyware into streaming sites, stealing crypto wallet seeds.
Cronos blockchain resumes after price manipulation drained $74M from Tectonic lending app.
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
Treasury targets Iran-linked hackers behind critical infrastructure breaches in 'Operation Economic Outcast'.
Linux Foundation to govern TRACE, an open spec for cryptographically verifiable AI agent runtime evidence.
A researcher found that encrypting malicious instructions lets Grok exfiltrate user chats and personal details.
Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.
SafePal warns of phishing risk after order data for nearly 40,000 customers is exposed in a breach.
SafePal reports a breach affecting 39,798 customers, exposing personal data through a plugin flaw.