Crypto hacker offered reward after $600m heist

The Biden administration last week expanded a Trump-era list of Chinese companies that Americans can’t invest in because of purported links to the Chinese military and surveillance. Companies on the list include telecom equipment maker Huawei and Chinese oil company China National Offshore Oil Corp. On Tuesday, the Senate passed a bill that aims to…

A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap (.BMP) image file to drop a remote access trojan (RAT) capable of stealing sensitive information.Attributing the attack to the Lazarus Group based on similarities to prior tactics adopted by the adversary, researchers…

“Either they just intended to commit theft and steal the assets, or they were acting like a white hat hacker to expose a bug, to help Poly Network make themselves more strong and secure,” Mr Robinson, who routinely advises governments and law enforcement agencies about crypto-related crimes, told the BBC.

The vulnerability in question exists in the single sign-on and password management solution since early August 2021. Zoho Corporation is an Indian multinational technology company that creates web-based business tools, being known for its online office suite named Zoho. The vulnerability, tracked as CVE-2021-40539 was discovered in the Zoho ManageEngine ADSelfService Plus software. The vulnerability in question can allow attackers to take over vulnerable systems…

A cyberattack on JBS SA, the world’s largest meat producer, has forced the shutdown of some of the largest slaughterhouses globally, and there are signs that the closures are spreading. A JBS beef plant in in Brooks, Alberta, one of Canada’s largest, was shut down on Monday following the May 30 attack. A trade group…

SolarWinds told Congress that using the password ‘solarwinds123’ was an intern’s mistake. A key researcher told Insider the log-in information was posted publicly on GitHub for years. Cybersecurity experts say the issue appears to represent more than an intern’s weak password.  Visit the Business section of Insider for more stories. Two SolarWinds CEOs told the…