Security News
About Bruce Schneier I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.
How can organizations balance the need for robust digital asset protection with the drive for business innovation and agility? To best integrate digital assets in your business, it's crucial to integrate your digital asset management solution with your IT systems.
A blockchain developer shares his ordeal over the holidays when he was approached on LinkedIn by a "Recruiter" for a web development job. The recruiter in question asked the developer to download npm packages from a GitHub repository, and hours later the developer discovered his MetaMask wallet had been emptied.
Dubbed "NKAbuse" by the researchers, the Go-based backdoor offers criminal attackers a range of possibilities, including being able to DDoS or fling remote access trojans, and leans on NKN for more anonymous yet reliable data exchange. NKN is an open source protocol that lets users perform a peer-to-peer data exchange over a public blockchain - like a cross between a traditional blockchain and the Tor network.
A novel multi-platform threat called NKAbuse has been discovered using a decentralized, peer-to-peer network connectivity protocol known as NKN (short for New Kind of Network) as a communications...
A new Go-based multi-platform malware identified as 'NKAbuse' is the first malware abusing NKN technology for data exchange, making it a stealthy threat. NKN is a relatively new decentralized peer-to-peer network protocol leveraging blockchain technology to manage resources and maintain a secure and transparent model for network operations.
North Korean hackers are using novel MacOS malware named KandyKorn to target blockchain engineers of a cryptocurrency exchange platform. By impersonating blockchain engineering community members on Discord, the attackers used social engineering techniques to make victims download a malicious ZIP file.
Fully homomorphic encryption - a technique that allows data to be processed encrypted without the need for decryption - shows great promise in addressing the privacy issues associated with blockchain. FHE can enhance data security by allowing computations to be performed on encrypted data, reducing the risks pertaining to data exposure.
The Sandbox blockchain game is warnings its community that a security incident caused some users to receive fraudulent emails impersonating the game, trying to infect them with malware. The Sandbox is a blockchain-based open-world multiplayer game with over 350,000 active monthly users, offering them ways to build, own, and monetize interactive content like virtual worlds, items, and experiences.
"With the collapse of bankrupt crypto exchange FTX still sending shivers through the industry and fueling consumer mistrust, an Israeli multi-billion-dollar startup is making its"uncheatable" blockchain transaction technology available for mass adoption in hopes of preventing the next fraud scandal. Netanya-based StarkWare, which is valued at $8 billion, is the developer of a technology that compresses and speeds up blockchain transactions.