cybersecurity

🔐 SECURITY ALERT:
40 malicious Firefox add-ons were reportedly targeting crypto users, and some started out looking like harmless sports-score extensions.

The scary part? A normal update can quietly turn a trusted extension into a wallet-draining threat.

If your seed phrase or private key was exposed, simply uninstalling the add-on is NOT enough. Move funds to a completely new wallet with fresh keys. 🚨

Crypto security isn’t only about protecting your seed — it’s also about what you install on the device holding it.

#CryptoSecurity #BİNANCE #Web3 #crypto #CyberSecurity

🎣 A fake crypto website doesn’t always look fake.

Some phishing sites are designed to look almost identical to the real thing.

So before you connect your wallet or enter your login details, take a moment to check:

🌐 Check the URL
Make sure you’re using the official website.

🚨 Watch for urgency
“Act now” or “Your account will be closed” can be warning signs.

🔑 Protect sensitive information
Never share your password, 2FA code, Seed Phrase, or Private Key.

🎁 Be careful with unexpected rewards
If an offer looks too good to be true, stop and verify it first.

🛡️ A simple rule:
Don’t click first and verify later.

Go directly to the official platform or app instead.

📚 Learn more about phishing and online security through Binance Academy

🔎 Learn, verify, and always #DYOR

⚠️ Educational content only, not financial advice. Availability, eligibility, and regulations may vary by region.

#Binance #BinanceAcademy #learnwithbinance #Cybersecurity

DEFI PROTOCOL TERM LABS HIT BY $8.5M GOVERNANCE EXPLOIT
🚨 TERM LABS LOSES $8.5M
DeFi lending protocol Term Labs has been hit by a governance exploit, with approximately $8.5M in assets drained from its vaults.
🔎 WHAT HAPPENED?
Security researchers reported that the attacker withdrew approximately:
• 2,843 ETH
• $1.68M in USDC, later swapped into DAI
Term Labs confirmed that its Term Vaults were affected and said a deeper investigation is underway.
⚠️ THIS WASN'T A SIMPLE PRICE CRASH
The incident involved the protocol's governance system — the mechanism used to control decisions and permissions within the protocol.
🧠 TRAIIZE TAKE
DeFi doesn't only depend on smart-contract code.
Governance itself can become an attack surface.
Today's incident is another reminder that high yields and decentralised systems can also carry significant technical and governance risks.
We watch the news.
We verify the facts.
We explain the impact.
#DeFi #Crypto #Ethereum #ETH #Blockchain #CryptoNews #Cybersecurity

🚨 BREAKING: A Chinese AI model just nearly matched Anthropic's most restricted cybersecurity system, and Anthropic says it happened because China has been secretly mining Claude's own outputs for months.
Z.ai's new GLM-5.3 scored 84.5% on CyberGym, a benchmark testing whether an AI can find and validate software vulnerabilities in real code. That edges out Mythos 5, Anthropic's cybersecurity-focused model kept restricted to vetted organizations only, which scored 83.8%.
But there's a real gap hiding underneath that headline number. When it comes to actually turning a discovered flaw into a working exploit, the harder, more dangerous capability, Mythos 5 still dominates: 78.0% versus GLM-5.3's 54.4% on ExploitBench. In timed testing, Mythos completed 247 attack-development tasks in six hours. GLM-5.3 managed 130.
So this isn't a full match. It's a near-match on detection, with a real lag on weaponization.
Here's the part that's fueling real alarm in Washington. Anthropic has spent this year publicly accusing multiple Chinese AI labs, DeepSeek, Moonshot AI, MiniMax, and most recently Alibaba, of running industrial-scale "distillation attacks": using tens of thousands of fake accounts to flood Claude with millions of questions, then using its answers to train rival models faster and cheaper than building from scratch. Alibaba alone allegedly generated 28.8 million exchanges this way.
Z.ai itself sits on the US Entity List and has reportedly built massive AI data centers running entirely on Chinese-made chips, no Nvidia hardware at all, a direct answer to export controls designed to slow exactly this kind of progress.
Whether GLM-5.3 got here through raw innovation, distillation, or both is now the exact fight playing out between Anthropic, Chinese AI labs, and US export policy.
#AI #China #Anthropic #Cybersecurity #TechNews

GM. While you were busy doomscrolling about the latest rug pull, Microsoft dropped a banger of a security update that's basically the crypto world's "oh, thank goodness" moment.

THE ALPHA: Remember that "Perfect 10" exploit in Entra ID? Yeah, Microsoft yeeted that before it could even do a single 👀. No evidence of exploitation, just a good old-fashioned patch before the CVE went public. Stay safe out there, frens. #CyberSecurity #Microsoft #EntraID

THE PUNCHLINE INSIGHT: Turns out, even Big Tech can have a "honeypot" moment, but the real alpha is when they're agile enough to snatch it back before the bears get to feast. It’s like finding a hidden alpha gem before it moons.

So, question for the community: what's your go-to strategy for staying ahead of potential exploits in your digital life, beyond just HODLing? Spill the beans!

🚨 The most dangerous threat to your wallet might not be in the blockchain… but in your browser!

Cybersecurity company Socket revealed a campaign involving 77 Firefox browser extensions. It found that 40 of them are malicious and impersonate known wallets and Web3 products in order to steal:

🔑 Recovery phrases
🔑 Private keys
🔑 Login credentials
📋 Clipboard contents

Some of the extensions display professional-looking interfaces that resemble real wallets, while others can activate phishing pages remotely after installation. Meanwhile, they send modified copies of wallet data to attackers before encrypting it locally.

As for the remaining 37 extensions, Socket did not find any confirmed stealing malware in the analyzed samples. However, it classified them as deceptive extensions linked to the same campaign.

⚠️ If you entered your recovery phrase or private key into a suspicious extension, deleting it alone is not enough. Assume your wallet is compromised, create a new wallet with a new recovery phrase from a safe device, then move your assets to it.

Only download wallet extensions from the official website, and don’t trust any extension just because it appears in an official store.

So far, no confirmed numbers have been announced regarding the number of victims or the total value of stolen assets.

Have you checked your browser extensions recently? 👇

#CryptoSecurity #Web3 #Firefox #CryptoWallet #CyberSecurity

🚨 FBI arrests the young man behind spreading malicious software through fake Steam games, affecting 8,000 devices!

The Federal Bureau of Investigation has arrested a 21-year-old man named Zyaire Dontaevious Zamarion Wilkins, accused of running an online criminal operation with undisclosed partners for nearly two years. It is alleged that the group infected approximately 8,000 computers by embedding malware in counterfeit Steam games, highlighting cybersecurity risks.

━━━━━━━━━━━━━━
📊 Impact: 📊 Moderate
🏷️ OTHER

#Cybersecurity #FBI #Malware #GamingSecurity #TechCrime

🔗 Source: https://www.techspot.com/news/113163-fbi-arrests-21-year-old-accused-infecting-8000.html

🚨 77 malicious Firefox wallet extensions were exposed.

Security firm Socket identified 77 Firefox extensions linked to a suspected wallet-stealing malware operation.

The worst part?

40 extensions were confirmed to steal recovery phrases or private keys.

The extensions reportedly impersonated popular Web3 wallets including OKX, Rabby Wallet and TronLink, using fake wallet interfaces to trick users into entering their seed phrases.

Some modified versions of Rabby could even function normally while quietly sending wallet data to external servers.

Others targeted:
Clipboard data
Saved credentials
Recovery phrases
Private keys

Socket said the activity was observed between March 9 and August 3, with some malicious extensions still online when the research was reported.

And the warning is brutal:

If you entered your seed phrase or private key into one of these extensions, consider it permanently compromised and move your assets to a new wallet immediately.

Your seed phrase isn't a password.
Once it's leaked, it's leaked forever. 💀

After this, do you still dare to install a random wallet extension? 👀

#crypto #CyberSecurity #Wallet #defi #Web3

🚨 New version of malicious XCSSET software targets macOS developers

An enhanced version of the malicious XCSSET software targeting macOS users has appeared through compromised Xcode projects and GitHub repositories. A security report warns that this new version targets thousands of developers, which could put their data and systems at risk.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#CyberSecurity #MacOS #Malware #TechNews #Developers

📰 Source: bleepingcomputer.com

🚨 Malicious INC software exploits SonicWall vulnerabilities to extort organizations

Security reports revealed the INC ransomware is exploiting vulnerabilities in SonicWall SMA 1000 devices, enabling it to infiltrate organizations. This group uses coercion tactics that include calls and email messages to extort victims around the world, according to Resecurity, a cybersecurity company.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #Ransomware #SonicWall #DataSecurity #TechNews

📰 Source: securityaffairs.com

🚨 Report Reveals a New Method to Spread Malware Using PNG Images

A security report reveals that a group of hackers exploited fake pages and ClickFix instructions to hide malicious software within PNG image files hidden in web browsers. This method aims to deliver the malicious CountLoader or DeviceManager malware, which can decrypt data in memory.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #Malware #PNG #ThreatAnalysis #TechNews

📰 Source: 4sysops.com

🚨 QuickFox attack exploits supply chain to deploy FDMTP malware

The incident response team at FortiGuard Labs has revealed details of a cyberattack targeting the supply chain, in which modified Windows installer tools were used to compromise systems. This attack is known as QuickFox, and it deployed an advanced piece of malicious software called FDMTP, targeting specific victims with sophisticated methods.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#CyberSecurity #SupplyChainAttack #Malware #InformationSecurity #ThreatAnalysis

📰 Source: fortinet.com

🚨 Security Alert: Fake Adobe and Zoom Updates Spread Remote Access Malware

Cybersecurity researchers have uncovered an active campaign that uses social engineering lures through fake Adobe and Zoom software updates. The goal of this campaign is to secretly install remote access programs on systems, posing a security threat to users who may fall victim to these scams.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #Malware #ScamAlert #SecurityUpdate #RemoteAccess

📰 Source: thehackernews.com

🚨 Report Reveals New Tactics for Malware Targeting Users

A security report uncovered the use of a new Russian malicious software download service known as DOUBLECUP, along with innovative techniques for embedding harmful software. This service relies on tricking users via ClickFix to store PNG images infected with malware in the browser cache, and then distributing CountLoader malware and a Trojan horse for remote control through DeviceManager.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #Malware #Trojans #Cybercrime #Infosec

📰 Source: thehackernews.com

🔐 The latest US hacking case involving HBO is a reminder that old cyberattacks can have very long tails.

Prosecutors have expanded the Iran-linked case to 17 defendants, with six allegedly connected to HBO’s 2017 breach and a Bitcoin ransom demand that eventually reached around $6M.

One important detail: prosecutors do not allege that HBO actually paid the ransom.

So this isn’t a new HBO breach — it’s an expanded legal case tied to an old attack.

#Bitcoin #Crypto #CyberSecurity #Blockchain #BTC

🤖 Artificial Intelligence: a weapon and a target in increasing cyberattacks

According to a report from CrowdStrike, AI-supported activity in cyberattacks has risen significantly by 89%. This increase affects the timeframes for patching security vulnerabilities, which have shrunk to just 48 hours. The report shows that AI has become an integral part of cybersecurity attacks—either as a tool for attackers or as a potential target of these attacks.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #AI #CrowdStrike #TechNews #DigitalSecurity

📰 Source: theregister.com

⚠️ Email extortion messages exploit data from the Carnival breach and demand Litecoin

Reports revealed a campaign of fake email extortion messages that use data obtained from a previous breach of Carnival, affecting nearly 6 million people. These messages demand a payment of $2,000 in Litecoin to prevent the publication of personal information, highlighting how criminals exploit stolen data in fraudulent schemes.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #DataBreach #Litecoin #ScamAlert #InformationSecurity

📰 Source: foxnews.com

🚨 Hack Hits Ad Company to Target Crypto Wallets

Adform, an online advertising company, was hit by a cyberattack aimed at replacing copied cryptocurrency wallet addresses provided by users with addresses belonging to the attackers. The breach was carried out by exploiting ad scripts on websites that use the company’s platform, highlighting information security challenges in the industry.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #CryptoCrime #Adform #BlockchainSecurity #SupplyChainAttack

📰 Source: bleepingcomputer.com

Your Data Isn't “Just Data.”

🔐 The more data a system stores about you, the bigger the prize becomes when that system is compromised.

Look at what gets exposed in major data breaches:

Names.
Addresses.
Emails.
Phone numbers.
Dates of birth.
IBANs.
Documents.
Credentials.

Some breaches affect hundreds of thousands, even millions of people.

And there's a lesson we shouldn't ignore:

Your data is not “just data.”

Every database storing your identity becomes another potential target.

Every centralized system collecting more information creates a bigger prize for attackers.

That's why privacy by design matters.

Instead of collecting everything first and protecting it later, why not build systems that require less personal information from the beginning?

That's the idea behind #Liberdus :

🔐 Private communication
🌐 Decentralized infrastructure
🛡️ Less dependence on centralized identities

We can't prevent every cyberattack.

But we can ask a better question:

Why give away so much data to systems that don't actually need to own it?

The future of digital communication should collect less, expose less, and give users more control.

Privacy shouldn't be a premium feature.

🔐 It should be the default.

#Liberdus #Privacy #CyberSecurity #DataPrivacy