A researcher has analyzed internet-facing Perforce P4 servers and found that many are still misconfigured, exposing highly sensitive information. Perforce P4 (formerly Helix Core) is a centralized version control platform built to handle the massive data requirements of industries like… Read More "Unsecured Perforce Servers Expose Sensitive Data From Major Orgs"
North Korea-linked Lazarus Group has been blamed for a $290 million cryptocurrency heist from the Kelp DAO DeFi protocol. The attack occurred at 17:35 UTC on Sunday, when the attackers delivered a malicious instruction to drain 116,500 rsETH (restaked ether),… Read More "$290 Million Kelp DAO Crypto Heist Blamed on North Korea"
Vercel confirmed on Sunday that it has suffered an intrusion after a hacker offered to sell data allegedly stolen from the company’s systems. Vercel is best known as the company behind Next.js, the popular open source React framework for building… Read More "Next.js Creator Vercel Hacked – SecurityWeek"
Researchers at Darktrace have discovered a new malware strain named ZionSiphon, which appears to target water treatment and desalination plants in Israel. ZionSiphon has many capabilities typically seen in commodity malware, but it caught analysts’ attention due to functionality aimed… Read More "ZionSiphon Malware Targets ICS in Water Facilities"
