Playing With Crypto? You’ll Need a Wallet (or Several)

Buying and selling NFTs or transferring digital currency is going to require a little leap of faith. Here’s how to get started...

go -- multiple vulnerabilities

The Go project reports: crypto/elliptic: fix IsOnCurve for big.Int values that are not valid coordinates Some big.Int values that are not valid field elements negative or overflowing might cause Curve.IsOnCurve to incorrectly return true. Operating on those values may cause a panic or an invalid...

The DOJ’s $3.6B Seizure Shows How Hard It Is to Launder Crypto

A couple allegedly used a “laundry list” of technical measures to cover their tracks. They didn’t work...

CVE-2021-33147

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33147

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

Input validation

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33147

The CVE-2021-33147 issue affects the Intel IPP Cryptography library prior to 2021.2. Affected component: Intel IPP Crypto library (before 2021.2). Root cause: improper conditions check may allow an authenticated user to cause information disclosure via local access. Impact: confidentiality exposu...

CVE-2021-33147

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-33147

Improper conditions check in the IntelR IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access...

Intel Integrated Performance Primitives 代码问题漏洞

Intel Integrated Performance Primitives IPP is a suite of programming tools for working with images, signal processing, and data from Intel Corporation USA. A code issue vulnerability exists in the Intel Integrated Performance Primitives Crypto library that stems from a potential security hole in...

A week in security (January 31 – February 6)

Last week on Malwarebytes Labs: Threat actor steals email with Zimbra zero-day FBI warns of bogus job postings on recruitment sites Investment scams are on the rise A worrying Etsy listing reveals the stalking potential of Apple’s AirTags Beware bogus OperaGX sponsorship offers $320 milllion stol...

@abc.xyz/drop-down-treeview (>=0.0.15 <=0.0.16), @abcpros/bitcore-build (>=8.25.29 <=8.25.30) +1332 more potentially affected by CVE-2022-0437 via karma (>=0.10.2 <=6.3.13)

karma NPM version =0.10.2, =0.0.15, =8.25.29, =1.0.0, =0.1.1, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =5.0.0, =0.23.0, =2.3.0, =2.11.0 and more Source cves: CVE-2022-0437 Source advisory: OSV:GHSA-7X7C-QM48-PQ9C...

LockBit ransomware gang claims PayBito crypto exchange as new victim

By Waqas LockBit ransomware operators claim that they stole the PayBito database that contains 100,000 customers information including email addresses… This is a post from HackRead.com Read the original post: LockBit ransomware gang claims PayBito crypto exchange as new victim...

A $320 Million Crypto Hack Sends the DeFi World Reeling

Plus: News Corp gets hacked, UK snacks ransomware, and more of the week's top security news...

CVE-2022-24149

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service DoS via the wpapskcrypto parameter...

CVE-2022-24149

Tenda AX3 v16.03.12.10CN was discovered to contain a stack overflow in the function fromSetWirelessRepeat. This vulnerability allows attackers to cause a Denial of Service DoS via the wpapskcrypto parameter...

Tenda Ax3 缓冲区错误漏洞

Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 v16.03.12.10CN, which can be exploited by an attacker to cause a denial of service DoS via the wpapskcrypto parameter...

Wormhole hack – Hackers steal $320M in one of the largest crypto heists

By Waqas Wormhole has confirmed the hack but claims that the stolen funds have been restored and the vulnerability in… This is a post from HackRead.com Read the original post: Wormhole hack - Hackers steal $320M in one of the largest crypto heists...

$320 milllion stolen from Wormhole crypto-trading platform

By using an exploit in the software of crypto-trading platform Wormhole, threat actors have stolen an estimated $322 million in cryptocurrencies. The platform is offering a $10 million award for the stolen money and details about the attack. How they pulled it off Wormhole Portal is a web-based...

GSD-2022-1000070 Reliance on improperly secured communications channel (Discord) in Grape Network version unknown

In Grape Network Grape Network version unknown a Reliance on improperly secured communications channel Discord exists in the Discord community "announcement" channels for multiple NFTs that can be attacked via unknown resulting in access Grape Network tokens was used to send Discord server messag...