Defendor

Sign in Subscribe

Latest

Amazon AI Assistant Hacked to Wipe Data

Amazon AI Assistant Hacked to Wipe Data

Source: fr0gger_ on Twitter A serious security incident has come to light involving an Amazon AI coding assistant. An attacker exploited misconfigured GitHub workflows to sneak in a malicious pull request. This harmful change went unnoticed for six days after being published on the Visual Studio Code (VSC) marketplace. What

You Were Almost Hacked: Inside The Red Guild’s 2023 Ethereum Argentina Security Campaign

You Were Almost Hacked: Inside The Red Guild’s 2023 Ethereum Argentina Security Campaign

Source: blog.theredguild.org Crypto conferences may seem exciting hubs for networking and knowledge, but they’re also hotbeds for attackers trying to scam or compromise devices. The Red Guild took this reality head-on by running an undercover security awareness campaign at Ethereum Argentina 2023, aiming to teach people how

How to Drain a Lending Protocol Using a New Collateral Asset: A Step-by-Step Exploit Explained

How to Drain a Lending Protocol Using a New Collateral Asset: A Step-by-Step Exploit Explained

Source: kankodu A recent security issue was discovered in the lending protocol @vesuxyz, which is built in Cairo and supports multiple lending pools with various collateral-debt asset pairs. This vulnerability was responsibly reported through Immunefi’s bug bounty program and classified as High severity. Here’s a clear breakdown of

CoinDCX Launches $11M Recovery Bounty After $44M Hot Wallet Hack

CoinDCX Launches $11M Recovery Bounty After $44M Hot Wallet Hack

Source: CoindDCX Recovery Bounty Program | HackenProof Incident Overview On July 19, 2025, CoindDCX, India’s leading crypto investment platform, confirmed a critical security breach. A server-side exploit led to the compromise of one of their internal operational hot wallets used for liquidity provisioning, resulting in the unauthorized withdrawal of approximately

Crypto Hacks Hit $3.1B in 2025 as Access Flaws Fuel Rising Losses

Crypto Hacks Hit $3.1B in 2025 as Access Flaws Fuel Rising Losses

Source: CoinTelegraph The blockchain security firm Hacken reports that crypto-related losses in the first half of 2025 have already surpassed $3.1 billion. This exceeds the total $2.85 billion lost throughout 2024. While the massive $1.5 billion Bybit breach early this year is a notable event, the wider

Lazarus Group Exposed: New Infrastructure & Intel Behind $1.4B ByBit Hack

Lazarus Group Exposed: New Infrastructure & Intel Behind $1.4B ByBit Hack

Source: Silent Push Key Insights * Silent Push analysts have accessed sensitive infrastructure tied to the Lazarus Advanced Persistent Threat (APT) Group, a North Korean state-sponsored hacking collective. * The Lazarus Group registered the domain bybit-assessment[.]com just hours before the record-breaking $1.4 billion ByBit crypto theft. This domain links to

Blockchain Forensics Made Simple: How to Trace and Stop Stolen Crypto Funds

Blockchain Forensics Made Simple: How to Trace and Stop Stolen Crypto Funds

Source: Blockchain Forensics: A Practical Guide to Tracing Stolen Funds Cryptocurrency’s explosive growth has unlocked new financial opportunities but also ushered in a wave of digital crime. Since 2016, an average of $1.3 billion in crypto assets have been stolen annually via hacks, scams, and exploits - from