Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below - helper-beeps.solidity-pro web3devtoolsx.solidity-pro Although neither of the extensions is now available on Open VSX, the GitHub repository
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
TN

The Hacker News

1d ago
0 0

Discussion

Don’t hold back—comment!

Don’t wait—start sharing your ideas now!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
US and South Korea warn of Gunra ransomware targeting govt agen…

U. S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems a…
Carlos the great

Carlos the great

7m ago
0
thehackernews.com
Hackers Breach Polish Power Plant Controls via Private Cellular…

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular net…
TN

The Hacker News

2h ago
0
darkreading.com
'GhostJacking' Exposes Identity Governance Gaps in AI Agents

New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.
DR

Dark Reading

7h ago
0
darkreading.com
The Patch Gap: Why Defenders Need to Think in Chains, Not Check…

It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.
DR

Dark Reading

14h ago
0
thehackernews.com
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Sp…

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fix…
JA

jordan af

15h ago
0
bleepingcomputer.com
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side…
Giulia

Giulia

18h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Hackers Breach Polish Power Plant Controls via Private Cellular…

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular net…
TN

The Hacker News

2h ago
0
thehackernews.com
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Sp…

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fix…
JA

jordan af

15h ago
0
thehackernews.com
OpenAI's Next AI Model Astra Shows Cyber Performance Strong Eno…

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation…
TN

The Hacker News

1d ago
0
thehackernews.com
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence …

Attacker-controlled instructions can make Atlassian's Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outsi…
Golden Greta

Golden Greta

3d ago
0
thehackernews.com
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT an…

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targetin…
TN

The Hacker News

3d ago
0
thehackernews.com
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - P…

WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management sys…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest