The Hacker News (2 hours ago)
Customers of the mSecure password manager are being urged to act now to protect the confidential information they store in it, possibly by changing passwords, resetting two-factor authentication (2FA), and removing passkeys.
Read the full story on The Hacker News.
Cryptocurrency exchange Binance says North Korean hackers used a fake job interview to trick an employee into installing malware that ultimately let them compromise the company’s wallet infrastructure and steal about $6.34 billion in digital assets.
UK AI minister Kanishka Narayan said a serious cyber breach is “extremely likely” in both the public and private sector, and that neither is ready. He pointed to extra funding for the AI Security Institute as the government’s response.
Cybersecurity experts have long warned of the persistent and patient threat from North Korea’s long-running hacks. The world’s largest crypto exchange was still caught off-guard.
Suspected North Korean attackers duped an engineer with a fake job interview and a malicious download to gain a foothold in the crypto firm’s system and steal billions, according to Binance.
Firm reveals details about how its cryptocurrency exchange was compromised, saying operation began in June The hackers behind the $6.3bn (£4.7bn) Binance heist used bogus job interviews, malicious software and an internal AI tool, the company has revealed.
Well, have you played Atuel? If not, you can do so within the next hour - it’s a tiny, free, 25-minute walking sim, albeit one with little actual walking on account of you playing most of it as a river. More of a running sim, really.
Blockchain infrastructure provider Chainstack on Tuesday disclosed that it was targeted in a cyber attack that allowed an unauthorized party to gain access to some parts of its infrastructure.
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world’s largest cryptocurrency exchange was the culmination of a “sophisticated, multi-stage campaign” that involved the use of a tampered Homebrew installation and recruitment-themed social engineering attack…
Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device.
Google on Monday warned that threat actors are hijacking enterprise access to Large Language Models (LLMs) to fraudulently leverage expensive computing resources and AI services.
69 active sources
24 Turkish · 45 English
All sources
