/
ttps_attack:T1657 × victim_sectors:cryptocurrency × criticity:high × limpar

Resultados

3 casos · pág. 1/1

thehackernews.com · high

V12 discloses 25 x402 SDK flaws, including three critical ones that let malicious APIs drain AI agent wallets

Security firm V12 reported on October 22 that the x402 SDKs, an open standard for AI agents paying for API calls over HTTP 402, contained 25 flaws, three rated critical. The most notable was that the default client set no spending limit, so a malicious API could get an agent with an automatic signer to sign a payment for its full balance …

sentinelone.com · high

Weekly CTI roundup: Bitget $387M DPRK-linked heist, Pentagon DMDC breach of 3M, KillSec takedown, ex-military cybercrime sentences

This SentinelOne weekly roundup covers law enforcement wins and two major breaches. A federal court sentenced former U.S. Army soldier Cameron John Wagenius to 70 months for attacks on technology and telecom firms, and former U.S. Air Force members Chijioke Timothy Odimegwu and Harafat Mogaji received a combined 189 months for business em…

bleepingcomputer.com · · 3 fontes · 3 atualizações high

Railway PaaS breach exposes customer environment variables and secrets; deployments paused, wallets drained, all users told to rotate keys

Railway, a Platform-as-a-Service provider, disclosed "anomalous activity" on the systems that store customer environment variables. An unauthorized third party may have accessed encrypted variables and, in some cases, obtained the decrypted contents (thehackernews.com, techcrunch.com, bleepingcomputer.com). Railway detected the activity e…