If you used a DeFi front end late in October, pull your token approvals back. CryptoTicker.io reports that twelve DeFi sites served a wallet drainer after their Name.com domains were hijacked, and the approvals to revoke are the ones from October 31. The Hacker News reports an attacker got into the cPGuard update system on November 2 and pushed a malicious script to customers' Linux servers, which installed a backdoor and collected password hashes. GBHackers News reports a WordPress remote code execution flaw under active attack, with over 58,000 exploit attempts blocked. None of these started in the application code. They arrived through the channels that deliver it: the domain, the update feed, the plugin. We audit domain, DNS and front-end integrity controls, including registrar locks and 2FA, and we come back to you with cost and timeline within a day. Message us if you want your delivery path reviewed.
Was this useful?