MetaMask Security Incident Affects Ethereum Validators, Wallets Remain Safe A critical security incident has unfolded at MetaMask, a leading provider of non-custodial cryptocurrency wallets and staking services on the Ethereum network. The company has confirmed that its infrastructure has been compromised, but reassuringly states that there is “no immediate threat to MetaMask wallets.” This incident … Read more
Citrix NetScaler Hack Allows Malicious Actors to Gain Superuser Access and Bypass Security Measures A critical vulnerability in Citrix’s NetScaler product has been exploited by attackers to gain superuser access, allowing them to execute malicious code on affected systems. This exploit takes advantage of a flaw in the way NetScaler handles web shells, effectively creating … Read more
A Critical Vulnerability in MetaMask Exposes Ethereum Validators, Prompting Widespread Exit from Network A recently disclosed security incident has sent shockwaves through the Ethereum ecosystem, as a critical vulnerability in the widely-used wallet extension MetaMask has exposed numerous validators to potential cyber attacks. The affected validators have been forced to exit the network, leaving many … Read more
A staggering cryptocurrency heist has shaken the digital landscape, with reports emerging that a third-party zero-day vulnerability is behind the theft of $387.5 million from Bitget, a leading global crypto exchange. The incident serves as a stark reminder of the ongoing cat-and-mouse game between cyber attackers and security professionals, highlighting the need for vigilance and … Read more
As a critical vulnerability in Apple’s CoreGraphics software has emerged, security researchers are warning of potential consequences that extend far beyond the tech giant itself. The proof-of-concept (PoC) exploit, which allows for cross-domain privilege escalation, could be used to breach sensitive systems and data, leaving users vulnerable to active attacks. At its core, the vulnerability … Read more
Russia’s Star Blizzard APT Actor Widenits its Phishing Net with RedFlick Tactic The Russia-linked advanced persistent threat (APT) actor known as Star Blizzard has significantly expanded its phishing operations, using a new tactic called RedFlick to evade detection and reach even more targets. In recent attacks, the group has ditched its previous ClickFix strategy, opting … Read more
A Paradox Unfolds as AI Reshapes the Security Operations Career Ladder A new study by Swimlane has uncovered a surprising trend in the security operations (SOC) industry. As artificial intelligence (AI) detection and response become increasingly essential, job satisfaction among security professionals is rising – but not without a catch. While 91% of respondents report … Read more
A critical vulnerability in Citrix NetScaler has been discovered, allowing attackers to create a superuser account and map web shells to CSS-like URLs. This exploit can be used to gain unfettered access to sensitive systems and data, making it a major concern for organizations that rely on the platform. Citrix NetScaler is a popular application … Read more
A recent security incident involving MetaMask, a popular Ethereum wallet and decentralized application (dApp) platform, has prompted several affected Ethereum validators to exit the network. The issue is centered around identity exposure, which has allowed attackers to exploit active attack paths and compromise sensitive information. The incident began when it was discovered that certain Ethereum … Read more
Bitget, a Singapore-based cryptocurrency exchange, has confirmed that a third-party zero-day vulnerability was exploited in a massive heist that saw hackers siphon off nearly $387.5 million worth of digital assets from users’ accounts. The brazen attack highlights the ongoing risks faced by the cryptocurrency industry and underscores the importance of robust security measures to prevent … Read more