Coordinated Twitter attack rakes in 100 grand

Update 7/18/2020 Twitter released an update about the situation and their investigation on their blog. Update 8/2/2020 ZDNet published a timeline based on the court documents released by the DOJ "Im feeling generous because of Covid-19. Ill double any BTC payment sent to my BTC address for the ne...

Several High-Profile Accounts Hacked in the Biggest Twitter Hack of All Time

Social media platform Twitter, earlier today on Wednesday, was on fire after it suffered one of the biggest cyberattacks in its history. A number of high-profile Twitter accounts, including those of US presidential candidate Joe Biden, Amazon CEO Jeff Bezos, Bill Gates, Elon Musk, Uber, and Apple...

Several High-Profile Accounts Hacked in the Biggest Twitter Hack of All Time

Social media platform Twitter, earlier today on Wednesday, was on fire after it suffered one of the biggest cyberattacks in its history. A number of high-profile Twitter accounts, including those of US presidential candidate Joe Biden, Amazon CEO Jeff Bezos, Bill Gates, Elon Musk, Uber, and Apple...

Twitter Confirms it was Hacked in an Unprecedented Cryptocurrency Scam

Twitter locked down thousands of verified accounts belonging to elite Twitter users and high-profile companies Wednesday afternoon in an effort to prevent hackers from perpetrating a massive cryptocurrency scam. The accounts fell victim to a compromise of the company’s internal systems by a group...

A Twitter Hacking Spree Hits Elon Musk, Obama, Apple, and More

An unprecedented “security incident” has rocked Twitter—and scammers are making off with huge amounts of bitcoin...

Brazil's Banking Trojans Go Global

Malware that is typically used in Brazil is expanding its geography, targeting users in North America, Europe and elsewhere in Latin America. Banking trojans, which steal online banking logins and other financial credentials from unsuspecting victims, are fairly common – but the more sophisticate...

Bitcoin wxBitcoin/bitcoind Design Error Vulnerability

A vulnerability exists in Bitcoin wxBitcoin and bitcoind 0.3.x versions. A remote attacker could exploit this vulnerability to cause a denial of service power drain via a Bitcoin transaction containing multiple OPCHECKSIG script opcodes...

Bitcoin wxBitcoin/bitcoind Denial of Service Vulnerability

A vulnerability exists in Bitcoin wxBitcoin and bitcoind versions prior to 0.3.5. A remote attacker could use this vulnerability to cause a denial of service daemon crash via a Bitcoin transaction containing the OPLSHIFT script opcode...

Bitcoin wxBitcoin/bitcoind Buffer Overflow Vulnerability

A vulnerability exists in Bitcoin wxBitcoin and bitcoind versions prior to 0.3.13, which stems from bitcoins that do not properly process the associated bitcoin transaction with a zero-point confirmation. A remote attacker could exploit the vulnerability to cause a denial of service a large numbe...

Bitcoin wxBitcoin/bitcoind Integer Overflow Vulnerability

An integer overflow vulnerability exists in Bitcoin wxBitcoin and bitcoind versions prior to 0.3.11. A remote attacker could exploit this vulnerability to bypass economic restrictions and create many bitcoins via specially crafted Bitcoin transactions...

Ledger SAS Live Code Issue Vulnerability

Ledger SAS Live is a cryptocurrency wallet product from the French company Ledger SAS. A security vulnerability exists in Ledger SAS Live versions prior to 2.7.0. Unprocessed Bitcoin's Replacement of Fees RBF, which increases a user's balance with the value of an unconfirmed transaction immediate...

CVE-2020-12119

Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee RBF. It increases the user's balance with the value of an unconfirmed transaction as soon as it is received before the transaction is confirmed and does not decrease the balance when it is canceled. As a result, users are exposed t...

CVE-2020-12119

Ledger Live before version 2.7.0 is affected by an RBF handling flaw: unconfirmed Bitcoin transactions are credited to the user’s balance upon receipt and not deducted if canceled, enabling basic and amplified double-spending and potential DoS attacks without user consent. The vulnerability is do...

CVE-2020-12119

Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee RBF. It increases the user's balance with the value of an unconfirmed transaction as soon as it is received before the transaction is confirmed and does not decrease the balance when it is canceled. As a result, users are exposed t...

CVE-2020-12119: Insufficient Verification of Data Authenticity

Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee RBF. It increases the user's balance with the value of an unconfirmed transaction as soon as it is received before the transaction is confirmed and does not decrease the balance when it is canceled. As a result, users are exposed t...

PT-2020-13047

Name of the Vulnerable Software and Affected Versions Ledger Live versions prior to 2.7.0 Description The issue arises from the software's failure to handle Bitcoin's Replace-By-Fee RBF properly. It incorrectly updates the user's balance by adding the value of unconfirmed transactions as soon as...

Bitcoin Core and Bitcoin Knots Security Vulnerabilities

Bitcoin Core is an open source client for verifying the validity of blockchain transactions. Bitcoin Knots is a complete Bitcoin client. A security vulnerability exists in Bitcoin Core and Bitcoin Knots. An attacker can exploit the vulnerability to cause a denial of service application crash with...

UCSF Pays $1.14M After NetWalker Ransomware Attack

The University of California, San Francisco UCSF has paid a $1.14 million ransom to recover data related to “important” academic work. The data was encrypted after the NetWalker ransomware reportedly hit the UCSF medical school. The UCSF, which includes a medical school and a medical center UCSF...

Z-NOMP Security Vulnerabilities

Z-NOMP is a suite of node open bitcoin mining software. A security vulnerability exists in versions of Z-NOMP prior to 2018-04-05...

CVE-2020-14199

BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading to a huge transaction fee. NOTE: this affects all hardware wallets. It was fixed in 1.9.1 for the...