BTC $80,023.58 -1.56%
ETH $2,316.05 -2.07%
BNB $748.35 -0.14%
XRP $1.29 -2.99%
SOL $100.04 -2.44%
TRX $0.3312 -0.12%
DOGE $0.0780 -2.72%
ADA $0.1991 -3.74%
BCH $279.05 -7.08%
LINK $11.46 -2.93%
HYPE $79.08 -3.62%
AAVE $130.40 -3.40%
SUI $0.9103 -3.06%
XLM $0.1683 -1.97%
ZEC $1,247.32 -5.18%
AAPL $347.71 +0.42%
AMZN $252.26 -0.75%
GOOGL $292.47 -10.14%
MSFT $548.13 +3.21%
META $621.38 -0.34%
NVDA $213.97 -2.58%
TSLA $402.04 -1.89%
SNDK $1,356.32 -0.32%
INTC $91.74 -3.73%
SPCX $143.93 -3.89%
MU $949.40 -1.46%
AMD $561.78 -1.14%
BTC $80,023.58 -1.56%
ETH $2,316.05 -2.07%
BNB $748.35 -0.14%
XRP $1.29 -2.99%
SOL $100.04 -2.44%
TRX $0.3312 -0.12%
DOGE $0.0780 -2.72%
ADA $0.1991 -3.74%
BCH $279.05 -7.08%
LINK $11.46 -2.93%
HYPE $79.08 -3.62%
AAVE $130.40 -3.40%
SUI $0.9103 -3.06%
XLM $0.1683 -1.97%
ZEC $1,247.32 -5.18%
AAPL $347.71 +0.42%
AMZN $252.26 -0.75%
GOOGL $292.47 -10.14%
MSFT $548.13 +3.21%
META $621.38 -0.34%
NVDA $213.97 -2.58%
TSLA $402.04 -1.89%
SNDK $1,356.32 -0.32%
INTC $91.74 -3.73%
SPCX $143.93 -3.89%
MU $949.40 -1.46%
AMD $561.78 -1.14%

dos

All
Article
Flash

Hackers claim to have leaked information of over 40,000 employees from the U.S. Department of Homeland Security through Okta, and DDoSecrets has made it public

According to TechCrunch, a hacker claiming to be from the "Department of Peace" has reportedly obtained a large amount of employee data from the Okta single sign-on system used by the Department of Homeland Security (DHS), which was publicly released on Wednesday by the data transparency organization Distributed Denial of Secrets (DDoSecrets) as the "Icepick" dataset. The leaked records exceed 40,000, accounting for about one-fifth of DHS's approximately 220,000 employees, involving names, positions, work emails, phone numbers, and office locations, along with information related to internal system permissions. Among these, approximately 21,000 records belong to Customs and Border Protection (CBP) personnel, while about 10,000 records involve the Immigration and Customs Enforcement (ICE) and its Homeland Security Investigations (HSI), with nearly 1,000 related to the Cybersecurity and Infrastructure Security Agency (CISA).TechCrunch stated that it has verified the authenticity of some of the data, with timestamps indicating that the data was exported around mid-August. The hacker also provided the data to journalist and hacker maia arson crimew, who then forwarded it to DDoSecrets. Okta responded that its systems and data were not breached; a spokesperson for the Department of Homeland Security has not yet responded to requests for comment. The report indicates that this is the third incident of data leakage from the U.S. government that has drawn attention in the past month, following the theft of Federal Bureau of Investigation personnel files and Pentagon personnel data.

Polygon Labs: Bor v2.1.3 released, fixing two DoS security vulnerabilities

Polygon Labs official announcement, Bor v2.1.3 is officially released to the public, previously distributed in private version form to validators and major infrastructure providers. This update fixes two medium-severity denial-of-service vulnerabilities in BlockSTM V2 parallel block execution, both submitted by security researchers through the Immunefi bug bounty program.Unbounded keccak256 cache issue: Attackers can fill hundreds of MiB of cache during the speculative execution phase by constructing specific transactions, leading to node memory exhaustion and delayed block production. The fix is to set a capacity limit on the shared cache. Repeated code hash calculation issue in parallel execution: A single transaction can cause the parallel processor to take about 11 seconds, severely affecting node activity. The fix is to cache code hash results on a per-transaction basis.In addition, this update also includes several internal hardening measures: the transaction pool address filtering adds interception for EIP-7702 SetCode authorization, RPC batch execution pool concurrency limit fixes, consistency fixes for reading balances across self-destruct boundaries in parallel execution, and an automatic cleanup mechanism for pending transactions (default 3 hours). The affected versions are Bor v2.1.1 and v2.1.2. v2.1.3 is a non-hard fork, and nodes can upgrade individually without coordination. No exploitation records of the two vulnerabilities have been found on the mainnet and testnet Amoy.
app_icon
ChainCatcher Building the Web3 world with innovations.