CuraSec

tag: Crypto · 3 items

2026-07-28 · BleepingComputer · source ↗ #app-store#crypto#fraud
  • Engineer — Skip
  • SOC/IR — Skip
  • Leader — Learn: A lawsuit claiming Apple failed to prevent a fraudulent app from reaching consumers highlights platform vetting risk; useful context if your organization relies on mobile app stores for software distribution or if customers use your brand name in mobile apps.
2026-07-21 · BleepingComputer · source ↗ #defi#supply-chain#crypto
  • Engineer — Learn: The attack exploited off-chain price-feed infrastructure to manipulate a DeFi protocol — a useful design-level lesson for anyone building systems that trust external data pipelines (oracles, webhooks, enrichment feeds) without integrity controls. No patch available; review data-ingestion trust boundaries.
  • SOC/IR — Skip
  • Leader — Skip
2026-07-15 · The Hacker News · source ↗ #browser-extensions#crypto#privacy
  • Engineer — Learn: Research exposes a class of extension-level data leakage — wallet extensions correlating addresses and enabling cross-site tracking — worth considering when evaluating browser extension risk in enterprise environments or building wallet-adjacent tooling, but no patch or configuration action is available from this study.
  • SOC/IR — Skip
  • Leader — Skip