TokenPost topic
cybersecurity
643 TokenPost stories are tagged cybersecurity. The newest appear first.
Latest cybersecurity stories
- Researchers Demonstrate Telegram Sticker Flaw With Zero-Click iOS Code Risk
Telegram challenged the researchers’ assessment of the flaw’s severity. The disclosure did not state how broadly it affects users or whether a fix is available.
· Technology
- Researchers Disclose Telegram Sticker Flaw That Could Run Code on iOS
The demonstration took place at a security conference in Tokyo. Telegram disputed the researchers’ assessment of the flaw’s risk.
· Technology
- Ascend Checked Florida Plant Backups as Hurricane Approached
Ascend’s IT vice president described local backups and recovery checks for older systems. He named no AI deployment at the company.
· Technology
- Daishin Securities Breach Exposes Data on 38,490 Customers
The attack exposed names, email addresses and mobile phone numbers. Bithumb and Mirae Asset Global Investments also had separate cybersecurity incidents Wednesday.
· Technology
- Dell Adds AI Recovery Planning to Its Cybersecurity Portfolio
The Resilience Operations for AI service is available now, alongside PowerProtect identity recovery capabilities for Active Directory, Microsoft Entra ID and Okta.
· Technology
- Northstar Launches Security Context Graph With $7 Million Seed Round
Its graph has more than 70 integrations and lets external AI agents access connected security and IT data through the Model Context Protocol.
· Business
- Attackers Cut GMO Crypto Ransom Demand to $1 Million as Leak Domain Goes Offline
The attack on GMO Group’s cloud desktop service may have affected 26,739 servers. GMO Coin said it found no unusual activity in customer accounts.
· Technology
- South Korean Regulators Begin Bithumb Inspections After Breach Report
Customer information exposure remains under investigation. The review focuses on an employee-support system.
· Technology
- Bithumb Investigates Whether Breach Exposed Customer Data
The exchange disclosed unauthorized access to an employee mobile system and a personal-information leak. It has not determined whether customer records were exposed.
· Technology
- South Korean Police Open Probe Into Bithumb, Securities Firm Hacks
The incidents include exposure of personal and credit information belonging to 38,490 Daishin Securities customers. Bithumb is checking whether member information was also affected.
· Technology
- giftee Group, Inc. Expects ¥550 Million Loss After E-Gift System Breach
The company plans to record the estimated loss in its October-December quarter. Existing customer voucher balances were not reduced, giftee Inc. said.
· Technology
- Coinbase Says Amplitude Incident Exposed Some Customer Contact Data
Coinbase is notifying affected users by email but has not disclosed how many were affected or which contact fields were exposed.
· Technology
- Bithumb Checks for Customer Data Exposure After Employee Breach
The exchange confirmed employee information was exposed but has not disclosed how many workers were affected or what records were involved.
· Technology
- bitcoinjs-lib Fixes Two PSBT Bugs That Could Hide High Bitcoin Fees
A 7.0.1 demonstration showed a 900,000,000-satoshi fee reported as 200 satoshis; fixes are available across three release lines.
· Technology
- Bithumb Says Staff System Breach Was Separate From Trading Platform
The South Korean exchange is investigating whether customer information was taken and has reported no crypto losses.
· Technology
- Whitearmor Claims $15 Million Bitcoin Ransom Tied to Gamdom Accounts
Whitearmor’s account-count and 146-field claims remain unverified. The supplied evidence does not establish a link to Gamdom’s earlier wallet breach.
· Technology
- GMO Internet Reviews Online Post After Cloud Breach
The company said about 27,000 servers may be affected and has told customers to reset their passwords.
· Technology
- Bitcoin Core Changes Security Policy as AI Speeds Up Bug Hunting
Casa Chief Security Officer Jameson Lopp said vulnerability discovery has accelerated exponentially over two and a half months and urged developers to build security into their development pipelines.
· Technology
- Synack CEO Says AI Amplifies Attackers as South Korea Reviews 16 Firms
The Financial Services Commission counted about 100,000 pieces of customer data affected across 16 firms. A separate campaign’s reach remains unconfirmed.
· Technology
- Hackers Claim GMO Customer Data Exposure After $50 Million Ransom Demand
GMO suspended its foreign exchange trading service on Oct. 21, and all Onamae.com servers were breached, potentially affecting its users.
· Technology
- Udesk Script Injection Could Put Crypto Deposits and Account Data at Risk
The JavaScript sample can collect browser and authentication data, then alter deposit addresses and clipboard contents on some websites.
· Technology
- Keystone Will Destroy 18,835 Wallets After Authentication Key Theft
Shipments of devices using the key are paused, and up to 25,964 buyer records from 2024 to 2026 may have been stolen.
· Technology
- Binance Says It Stopped North Korea-Linked Threats Without System Damage or Asset Losses
The exchange said the threats were stopped during the previous week and warned that the “Contagious Interview” social engineering campaign remains active.
· Technology
- Keystone Cannot Guarantee Authenticity of Wallets Delivered After Oct. 20
A stolen device-verification key could let counterfeit wallets pass Keystone’s checks. The company urged customers with later deliveries to contact support.
· Technology
- Foundation Details Partial Breakdown of 23,000-Plus Phishing Attempts
The listed counts cover 19,057 attempts through Mailgun and 1,503 through Google Workspace. The number of potentially affected customers remains under investigation.
· Technology
- CoinDCX Warns Users of Phishing as Exchanges Investigate Similar Activity
The exchange said scammers are using fake notices and emails, while other platforms investigate similar activity.
· Technology
- LLM Sampling Bias Raises Simulated Security Risk in Patrol Test
Three Gemini variants produced modeled attacker success rates of 96.6% to 99.9%, compared with 75% under uniform server selection.
· Technology
- Anthropic Says Cathedral Test Reached Limited Business Systems
Cathedral’s unpublished draft says AI agents found paths through outside software in under 12 hours. Anthropic says Claude conversations, responses, source code and model weights were not reached.
· Technology
- Vitalik Buterin Backs Moonshot AI’s Cyber Safeguards for Kimi K3.1 Pro
Kimi K3.1 Pro scored 81.0% on Moonshot’s internal exploit test, compared with 90.5% for a comparable checkpoint without the safeguards.
· Technology
- Immunefi CEO Warns PHP Sites May Remain Vulnerable for Weeks
Mitchell Amador said smaller sites may need weeks to install the fixes and urged users to treat sites they log into as potentially compromised.
· Technology
- Keystone Breach Exposes 25,964 Hardware Wallet Purchase Records
Keystone plans to destroy 18,835 unsold devices authenticated with a compromised key and pause orders that have not shipped.
· Technology
- GMO Internet CEO Reveals $50 Million Ransom Demand After Cloud Breach
The company says it has paid nothing; up to 26,739 servers may have been affected.
· Technology
- Japan Targets Emergency Cybersecurity Package Within the Next Week
Proposed measures include high-performance AI checks of government systems and expanded incident-response support for companies.
· Regulation
- Foundation Says Phishing Emails Included Some Customer Details
Attackers were likely able to reach the company’s support inbox. Foundation said it stopped their ability to send email within 10 minutes of the first reports.
· Technology
- Researcher Wins About $2,000 Bitcoin (BTC) Bounty in PHP2Shell Challenge
The site’s PHP endpoint was added on Oct. 25, and killa’s exploit succeeded less than three hours later.
· Technology
- OANDA Confirms Unauthorized Trades After GMO Cloud Incident
The broker restricted accounts that may have been affected and disclosed no totals for accounts, trades or losses.
· Technology
- FoundationHQ Users Warned About Email Phishing
The warning urged users not to click email links. FoundationHQ's team had not issued an official announcement when the warning was relayed at 11:47 p.m. ET Sunday (03:47 UTC Monday).
· Technology
- Vitalik Says Use-Based AI Limits Are Less Harmful Than Identity-Based Treatment
He said excluding advanced offensive cyber capabilities from Kimi 3.1’s training data was acceptable. He also said society needs time to prepare for powerful cyberattacks.
· Technology
- GPU Rental Prices Across Listed Tiers Exceed January Levels
Token use rose again after a brief late-summer pause. Older A100 and H100 rates had spent more of the longer period below a six-year depreciation benchmark before strengthening in April.
· Technology
- GMO Internet Says Cloud Breach Put 26,739 Servers at Potential Risk
Customers reported unauthorized brokerage trades, and the company confirmed customer information was taken from the service.
· Technology