Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Major Bitcoin Exchange Suspends Service, Suspecting Attack
Newest First  |  Oldest First  |  Threaded View
RyanSepe
RyanSepe,
User Rank: Ninja
1/6/2015 | 9:22:42 AM
Re: Safeguards
Well there are many potential benefits to the bitcoin. It behaves similar to a stock in that it appreciates and depreciates. But it is a volatile currency. The digital medium of the currency makes it easy to store and transport. It is non-government regulated which also has its ups and downs but its an alternative means of currency and that is what I attribute to its largest value. Not indicative of national restraints. Universal value.

But as you say @Marilyn Cohodas, with it being a completely digital nature of the bitcoin exposes it to a plethora of exploits.
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
1/6/2015 | 9:09:11 AM
Re: Safeguards
Have to admit, I haven't warmed up -- or even totally understand -- the concept of Bitcoin and the potential for exploitation scares me. 
RyanSepe
RyanSepe,
User Rank: Ninja
1/6/2015 | 8:51:04 AM
Safeguards
I know a big proponent to the bitcoin is that they are not government regulated. But there are a few inherent flaws with the digital currency, which I know from experience of owning a couple of bitcoins myself. First is that when you have a bitcoin wallet, you most likely have it stored locally. Bitcoin banks need to treat their distribution of coins more closely to regular banks.

I think the main question here is: Are bitcoin distributors safeguarding their "data" in a similar fashion as banks treat their data? This isn't to say they will still not experience a breach because it happens to banks anyway but to minimize risk it would behoove these organizations to try and implement similar security frameworks. I would say due to the previous events the answer is most likely no.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Incorporating a Prevention Mindset into Threat Detection and Response
Threat detection and response systems, by definition, are reactive because they have to wait for damage to be done before finding the attack. With a prevention-mindset, security teams can proactively anticipate the attacker's next move, rather than reacting to specific threats or trying to detect the latest techniques in real-time. The report covers areas enterprises should focus on: What positive response looks like. Improving security hygiene. Combining preventive actions with red team efforts.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-25878
PUBLISHED: 2022-05-27
The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Object.prototype. This vulnerability can occur in multiple ways: 1. by providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption ...
CVE-2021-27780
PUBLISHED: 2022-05-27
The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.
CVE-2021-27781
PUBLISHED: 2022-05-27
The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.
CVE-2022-1897
PUBLISHED: 2022-05-27
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
CVE-2022-20666
PUBLISHED: 2022-05-27
Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector (CSPC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient va...