In a recent security incident, the EDE Finance project on the Arbitrum chain was hacked, resulting in a significant loss of funds. The attacker exploited vulnerabilities in the project's contracts to bypass permission restrictions and manipulate asset prices, making profits through position addition.. read more  

Jimbo’s Protocolwas hit with a flash loan attack in the early hours of Sunday, losing $7.5M. This marks the sixth incident on the Arbitrum platform in 2023. The hack exploited a lack of slippage control in the protocol's contract. The team has reached out to the attacker and offered a 10% bounty for.. read more  

Call to action: Node operators should diversify their execution clients away from a majority Geth setup.. read more  

Monero has become a popular cryptocurrency for cybercriminals to mine due to its value and low risk. SentinelOne recently detected a Monero mining campaign affecting Docker Linux systems, using simple obfuscation methods to evade detection and download a cryptocurrency mining program. Detection and .. read more  

NIST Cybersecurity Framework 2.0 (NIST SCF 2.0) will reflect the evolving cybersecurity landscape and is expected to be published in 2024... read more  

The Argo Project focuses on supply chain security and has made significant improvements in its security posture. It has adopted the SLSA framework, which provides a checklist of standards and controls to enhance security in software artifacts. Attestations play a crucial role in verifying the authen.. read more  

Automate actions to enhance AWS Security Hub findings... read more  

You can now get comprehensive account fraud prevention by combining AWS WAF Account Creation Fraud Prevention and Account Takeover Prevention in your AWS WAF web access control list (web ACL). This post shows you how to set up AWS WAF with ACFP for your application sign-up pages... read more  

Two sleuthing SREs uncovered an AWS security issue. Here's how they found it, why it matters, and what you need to do to resolve it... read more  

A Progess Software study found that many companies still don't understand DevSecOps, but they know securing their systems is a must... read more