Bitget resumes withdrawals after $388M crypto theft
Bitget has resumed Bitcoin withdrawals after attackers stole around $388 million from its hot and warm wallets by exploiting a third-party security product vulnerability. The theft, detected on September 24, did not affect Bitget's cold wallets or user accounts. Bitget says the exploited weakness has been fixed, and withdrawals for other cryptocurrencies will follow. The incident remains under investigation with outside experts assisting.
- Thief exploited flaw in third-party security tool
- Roughly $388M stolen from hot and warm wallets
- Cold wallets and user account balances unaffected
- Withdrawal suspensions used as a security measure
- Outside firms and law enforcement aiding investigation
Sources covering this
More in Cybersecurity
Critical zero-days in Citrix NetScaler exploited, patches released
Citrix has confirmed that two critical zero-day vulnerabilities affecting NetScaler ADC and Gateway devices have been exploited. Both flaws allow remote code execution, and security agencies in the US, UK, and elsewhere have issued urgent patch directives. Citrix released fixes after reports of active exploitation circulated for two days. Over 50,000 instances may be at risk, according to Unit 42. Cybersecurity authorities warn that forensic review and prompt updates are essential.
Apple fixes CoreGraphics flaw after targeted attacks
Apple has released security updates for iOS, iPadOS, and macOS to fix a CoreGraphics vulnerability that may have been used in highly sophisticated attacks targeting specific users of older software versions. The flaw allowed attackers to run code by sending a maliciously crafted file. Apple says improved bounds checking now addresses the issue but hasn't disclosed how many people were targeted or if attacks succeeded.
Carbonato botnet uses AI agent to control Docker hosts
Researchers have uncovered that the Carbonato botnet is exploiting unsecured Docker hosts to install the Hermes AI agent, which is controlled by attackers via Telegram. The malware uses a privileged container to obtain persistence, collect credentials, and spread to other servers on local networks. The AI agent receives instructions from operators to perform tasks on the compromised machines and forwards results back over Telegram.
Federal judge halts Utah's VPN age-check law
A federal judge has temporarily stopped enforcement of Utah's new law requiring adult websites to verify users' physical locations, even if they're using VPNs. The ruling came after Aylo, Pornhub's parent company, challenged the law, arguing it was unconstitutional. The court found it likely violates the U.S. Constitution, particularly the dormant Commerce Clause. The law would have forced sites to bypass VPN encryption and verify all users' locations, a technical impossibility according to the judge.