LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds

The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets as recently as late 2025, according to new findings from TRM Labs. The blockchain intelligence firm said...

The 2025 Go Cryptography State of the Union

This past August, I delivered my traditional Go Cryptography State of the Union talk at GopherCon US 2025 in New York. It goes into everything that happened at the intersection of Go and cryptography over the last year. You can watch the video with manually edited subtitles, for my fellow subtitl...

Scaling Patterns in Adversarial Alignment: Evidence from Multi-LLM Jailbreak Experiments

Large language models LLMs increasingly operate in multi-agent and safety-critical settings, raising open questions about how their vulnerabilities scale when models interact adversarially. This study examines whether larger models can systematically jailbreak smaller ones - eliciting harmful or...

Inside LockBit: Technical, Behavioral, and Financial Anatomy of a Ransomware Empire

LockBit has evolved from an obscure Ransomware-as-a-Service newcomer in 2019 to the most prolific ransomware franchise of 2024. Leveraging a recently leaked MySQL dump of the gang's management panel, this study offers an end-to-end reconstruction of LockBit's technical, behavioral, and financial...

EUVD-2009-2342

Malware in sbrugna...

EUVD-2024-0496

Malicious code in bioql PyPI...

EUVD-2024-0587

Malicious code in bioql PyPI...

The vulnerability of the distributed Git version control system, related to improper filtering of output data, allows a malicious actor to gain read, modify, or delete access to data, or execute arbitrary code.

The vulnerability of the distributed Git version control system is related to improper filtering of output data during the extraction or sending of message exchanges from the server. Exploiting this vulnerability can allow a remote attacker to gain read, modify, or delete access to data, or execu...

New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

The Windows banking trojan known as Coyote has become the first known malware strain to exploit the Windows accessibility framework calledUI AutomationUIA to harvest sensitive information. "The new Coyote variant is targeting Brazilian users, and uses UIA to extract credentials linked to 75 banki...

OESA-2025-1863 python-cryptography security update

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fixes: A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lea...

Transaction Proximity: a Graph-Based Approach to Blockchain Fraud Prevention

This paper introduces a fraud-deterrent access validation system for public blockchains, leveraging two complementary concepts: "Transaction Proximity", which measures the distance between wallets in the transaction graph, and "Easily Attainable Identities EAIs", wallets with direct transaction...

A Quantitative Notion of Economic Security for Smart Contract Compositions

Decentralized applications are often composed of multiple interconnected smart contracts. This is especially evident in DeFi, where protocols are heavily intertwined and rely on a variety of basic building blocks such as tokens, decentralized exchanges and lending protocols. A crucial security...

Centralized Trust in Decentralized Systems: Unveiling Hidden Contradictions in Blockchain and Cryptocurrency

Blockchain technology promises to democratize finance and promote social equity through decentralization, but questions remain about whether current implementations advance or hinder these goals. Through a mixed-methods study combining semi-structured interviews with 13 diverse blockchain...

CVE-2025-46348

creationtimestamp| type| source ---|---|--- 2025-04-28 16:51:05+00:00| published-proof-of-concept| https://github.com/YesWiki/yeswiki/security/advisories/GHSA-wc9g-6j9w-hr95 2025-04-29 21:10:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114423300046150064 2025-04-29 21:13:32+00:00|...

Denial Of Service (DoS)

golang.org/x/crypto are vulnerable to a Denial Of Service DoS. The vulnerability is due to incomplete or slow key exchanges, which cause pending content to be read into memory but never transmitted, allowing an attacker to consume server resources and cause a denial of service...

CVE-2025-30334

creationtimestamp| type| source ---|---|--- 2025-03-20 21:16:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196834383227856 2025-03-20 22:18:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8304 2025-03-20 22:30:49+00:00| seen|...

CVE-2024-57971

creationtimestamp| type| source ---|---|--- 2025-02-16 03:52:00+00:00| seen| https://infosec.exchange/users/cve/statuses/114011532176024665 2025-02-16 04:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3libeogjmwv2n 2025-02-16 04:48:33+00:00| seen|...

CVE-2025-1053

creationtimestamp| type| source ---|---|--- 2025-02-14 03:53:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114000214432857665 2025-02-14 04:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4drbe6a62p 2025-02-14 04:35:23+00:00| seen|...

GHSA-WG33-5H85-7Q5P

creationtimestamp| type| source ---|---|--- 2025-02-06 17:54:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113958223039348997 2025-02-06 17:56:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113958231450838584 2025-02-06 19:00:35+00:00| published-proof-of-concept|...

CVE-2025-24981

creationtimestamp| type| source ---|---|--- 2025-02-06 13:46:57+00:00| published-proof-of-concept| https://github.com/nuxt-content/mdc/security/advisories/GHSA-j82m-pc2v-2484 2025-02-06 17:28:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113958119425687178 2025-02-06 18:16:41+00:00|...