Aggregator

error code: 521

印度加密货币交易所 Mudrex 因合规性更新而停止提款至 1 月 28 日，引发了用户的反弹和社区的怀疑。 印度加密货币交易所 Mudrex 暂时停止了加密货币提现，引发了加密货币社区的反弹。 1 月 11 日，Mudrex 暂停了其平台上的加密货币提现，让用户对这一突然决定感到不解。 该公司告诉 Cointelegraph，暂停是暂时的，将持续到 1 月 28 日，目的是升级平台的合规框架，防止不良行为者滥用。 当被问及暂停运营以进行合规升级的必要性时，Mudrex 的联合创始人兼首席执行官 Edul Patel 说： 他说：“像加密货币这样重要的东西，你必须这样做。如果基础设施不正确，就很容易被滥用于邪恶活动。作为一个负责任的平台，我们需要确保我们的系统到位，并在各个时间点改进服务。” 值得注意的是，Mudrex 是印度少数几家允许加密货币提现的加密货币交易所之一。 “过去三年半以来，我们是印度唯一一家允许加密货币提现的公司，我们将继续坚持这一点。”帕特尔说。 社区反弹 在加密货币交易商 Vivan Live 在 X 上发帖，警告 Mudrex 用户立即撤回资金后，这一问题获得了关注。 Vivan 在帖子中写道： “恭喜！Mudrex 禁用了加密货币提款功能！别说我没告诉你！如果你还没把钱取出来，把它兑换成印度卢比–提现到你的银行，然后跑吧！” 另一位社区成员 Aakash Athawasya 对该交易所的意图表示怀疑，认为 Mudrex “本来就没有（加密货币提现）”，并指责它提供的是 “价格曝光，而不是所有权”。他说，“十英尺长的杆子 ”他都不会碰 Mudrex。 资料来源 Aakash Athawasya Mudrex 报告称，其用户数量每年增长 200%，达到 300 万，12 月份的交易量激增 20 倍，达到 2 亿美元。 印度面临着越来越严格的监管审查，这已经导致 Bybit 等交易所暂停了在该国的业务。Bybit宣布，从1月12日起，它将限制服务，包括加密货币交易、开户和下单，理由是不断变化的监管动态是其暂时退出印度市场的原因。 CoinDCX 推出加密货币提现服务 印度加密货币交易所 CoinDCX 为其用户推出了加密货币提现功能。 1 月 6 日，CoinDCX 首席执行官苏米特-古普塔（Sumit Gupta）在 X 上宣布，第一阶段将向 150 万用户推出该功能，并计划在后续阶段扩大该功能。 不过，选择加密货币取款的用户将不得不永久关闭其印度卢比存款功能，但卢比取款仍可继续使用。   转自安全KER，原文链接：https://www.anquanke.com/post/id/303436 封面来源于网络，如有侵权请联系删除

A vulnerability was found in Cisco ASR 5000. It has been rated as very critical. Affected by this issue is the function rtxMemHeapAlloc in the library asn1rt_a.lib of the component ASN1C. The manipulation leads to integer overflow. This vulnerability is handled as CVE-2016-5080. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Google Android and classified as critical. Affected by this vulnerability is an unknown functionality of the component Qualcomm Component. The manipulation leads to integer overflow. This vulnerability is known as CVE-2016-5080. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Oracle Communications Performance Intelligence Center (PIC) Software up to 10.2.0. Affected is an unknown function of the component Objective System ASN1C. The manipulation leads to integer overflow. This vulnerability is traded as CVE-2016-5080. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Adobe Flash Player up to 8.x. It has been rated as very critical. This issue affects some unknown processing of the component Keyboard Input Handler. The manipulation leads to numeric error. The identification of this vulnerability is CVE-2007-3456. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Apache Tomcat 4.1.24. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2007-3385. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, was found in ASN1C 7.0.0. Affected is the function rtxMemHeapAlloc in the library asn1rt_a.lib. The manipulation leads to integer overflow. This vulnerability is traded as CVE-2016-5080. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

#硬件设备 B 站 UP 主在液氦加持下将 14900KF 超频至 9.121GHz，打破超频爱好者 @Elmor 的世界纪录。这也是目前第二位将 CPU 超频至 9GHz 以上的爱好

Researchers analyzed new versions of the Banshee macOS Stealer sample that initially evaded detection by most antivirus engines, as analysis revealed that the malware employed a unique string encryption technique.  The encryption method was identical to that used by Apple’s XProtect antivirus engine for encrypting YARA rules within its binaries. By leveraging this shared encryption […]

The post 100 Million macOS Users At Risk – New Banshee Malware Attacks Bypassing Apple’s XProtect appeared first on Cyber Security News.

error code: 521

HackerNews 编译，转载请注明出处： 网络犯罪分子正采用一种名为“交易模拟欺诈”的新手段窃取加密货币，其中一起攻击成功盗取了价值约46万美元的143.45枚以太坊。 此次由ScamSniffer发现的攻击，凸显了现代Web3钱包中交易模拟机制存在的漏洞，该机制本应用于保护用户免受欺诈和恶意交易侵害。 攻击原理 交易模拟功能允许用户在签署和执行区块链交易前预览预期结果。 该功能旨在通过帮助用户验证交易内容（如转账的加密货币数量、燃气费及其他交易费用以及链上数据变化等）来增强安全性和透明度。 攻击者诱导受害者访问一个模仿合法平台的恶意网站，该网站启动了一个看似“领取”功能的操作。交易模拟显示用户将获得少量以太坊。 然而，模拟与执行之间存在时间延迟，攻击者利用这一时间差更改链上合约状态，从而在交易获得批准后改变其实际执行内容。 受害者信任钱包的交易模拟结果并签署了交易，导致网站将其钱包中的所有加密货币转至攻击者钱包。 攻击流程 ScamSniffer指出一起真实案例，受害者在状态更改后30秒签署了欺诈交易，导致资产（143.35枚以太坊）全部损失。 ScamSniffer警告称：“这种新的攻击方式标志着网络钓鱼技术的重大演变。攻击者不再依赖简单的欺骗手段，而是利用用户依赖的受信任钱包功能。这种复杂手段使得检测尤为困难。” 初始模拟（上）与篡改后的交易（下） 区块链监测平台建议，Web3钱包应降低模拟刷新频率以匹配区块链区块时间，在关键操作前强制刷新模拟结果，并添加过期警告以提醒用户风险。 从用户角度来看，这一新型攻击表明不应信任钱包模拟。 加密货币持有者应谨慎对待不明网站上的“免费领取”优惠，并仅信任经过验证的去中心化应用（dApps）。   消息来源：Bleeping Computer, 编译：zhongx；  本文由 HackerNews.cc 翻译整理，封面来源于网络；   转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability, which was classified as critical, was found in Yahoo! Messenger up to 8.1.0.249. Affected is an unknown function of the component ActiveX Control Handler. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2007-3147. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.