Trail of Bits is publicly disclosing two bugs that affect Shamir’s Secret Sharing implementation of Binance’s threshold signature scheme library (tss-lib) and most of its active forks. Here is the full list of affected repositories: Binance’s tss-lib Clover Network’s threshold-crypto Keep Network’s...
Facebook parent company wants to unmask cyber-criminals
HaveIBeenPwned password database expands by around a third
How to start the journey to zero trust architecture once you have decided it meets your business requirements.
The British Council suffered two successful ransomware attacks in the past five years, leading to 12 days of downtime
Group-IB warns one-off targeted links are harder to detect and take down
How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.
CSAM found on computer of nurse investigated over cyber-attack on former employer
Government agencies and companies in Australia affected by breach of recruitment company’s data
On August 18, 2021, samczsun reported a critical vulnerability in SushiSwap’s MISO smart contracts, which put ~350 million USD (109 thousand ETH) at risk. This issue is similar to an attack that was conducted on the Opyn codebase in August of 2020. At the time of the report, I was finishing my […]
The study revealed cyber-attackers can breach 93% of organizations’ network perimeters and gain access to their resources
Google and Meta agree to safeguard data on fiber-optic cable joining US with Southeast Asia
You just cloned a fresh source code repository and want to get a quick sense of its dependencies. Our tool, it-depends, can get you there. We are proud to announce the release of it-depends, an open-source tool for automatic enumeration of dependencies. You simply point it to a source code repositor...
Data held on the UK police national computer have been posted on the dark web
Sans Institute exercise reportedly sees defenders get hands-on practice
Version française: 🇫🇷 In January 2021, ANSSI was informed of a large campaign of attacks against French entities linked to the APT31 intrusion set. The investigations carried out by ANSSI led to the analysis of the intrusion set’s entire chain of infection. In turn, the knowledge acquired was...
Conspiracy ran for 13 years
CISA updates patching guidance to demand immediate action
English version : 🇬🇧 En janvier 2021, l’ANSSI est informée d’une vaste campagne d’attaques à l’encontre d’entités françaises liée au mode opératoire d’attaque (MOA) APT31. Les investigations réalisées par l’ANSSI ont permis d’analyser l’ensemble de la chaîne de compromission du mode opératoire....
Cybersecurity official shares tips for cutting risk ahead of the holidays