Cryptojacking silently hijacks compute power, inflates cloud bills, and erodes performance. Beyond financial losses, it exposes deep security risks, damages reputation, and drains productivity—making…

Cryptojacking silently hijacks compute power, inflates cloud bills, and erodes performance. Beyond financial losses, it exposes deep security risks, damages reputation, and drains productivity—making proactive detection and prevention essential for every organization.

GreyNoise tracked a coordinated cryptojacking blitz exploiting PHP RCE flaws (CVE-2024-4577, ThinkPHP) to deploy miners on cloud infrastructure. The spike is driven by high Bitcoin prices.

Introduction: A Dutch IT service provider faced a catastrophic financial loss after a hacker exploited deactivated multi-factor authentication (MFA) on a customer's Azure account. The subsequent cryptojacking attack spawned 60 virtual machines, accruing over €800,000 in cloud compute costs in a stark reminder that security misconfigurations are not just technical failures but severe business liabilities. This incident underscores the non-negotiable role of MFA in modern cloud infrastructure.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

ST. PAUL — A former Northland resident will repay more than $45,000 to his former employer for misusing their computer systems to mine cryptocurrency for

AI deception platform: Deceive, Detect, Respond. “You can’t defend. You can’t prevent. The only thing you can do is detect and respond.” Bruce Schneier. We turn that hard truth into your tactical advantage. Our AI-based decoys, built using our open-source framework, deceive attackers during lateral movement within the network. While intruders interact with the decoys, our AI-driven SOC monitors, analyzes, and responds in real time. Catching threats that evade traditional defenses, including zero-days and supply chain compromises. Deploy in under 2 minutes. Gain immediate threat intelligence, auto-isolate compromised systems, and eliminate false positives. Turning your network into an intelligent adversary.

Supply-Chain-Angriff: Entwicklerkonto verteilt Schadsoftware.

FortiGuard Labs exposes a high-severity phishing campaign impersonating the National Police of Ukraine to deliver Amatera Stealer (data theft) and PureMiner (cryptojacking) to Windows PCs.

If Redis is open to the internet, assume compromise. This actor gains root with native Redis tricks, plants miners, and hides using “rootkit-style” evasion. Here’s how to spot it fast and close the…