devops

ChainCatcher message, security company Wiz has discovered that a hacker organization codenamed JINX-0132 is massively exploiting configuration vulnerabilities in DevOps tools for cryptocurrency mining attacks. The attack primarily targets tools such as HashiCorp Nomad/Consul, Docker API, and Gitea, with approximately 25% of cloud environments at risk. The attack methods include: deploying XMRig mining software using Nomad's default configuration, executing malicious scripts through Consul's unauthorized API, and controlling exposed Docker API to create mining containers.

ChainCatcher news, Galaxy's Vice President of Research Christine Kim published a summary of the 112th Ethereum Core Developers Consensus Meeting. This week, developers discussed including a builder override flag in the Engine API, raising the target blob limit from 2 to 3, increasing the maximum blob limit from 4 to 6, and ongoing research around changing the maximum effective balance of validators. The increase in blob capacity was proposed by Dankrad Feist from the Ethereum Foundation after conducting data experiments to test the network's capacity for handling large blocks.Parithosh Jayanthi from the Ethereum Foundation DevOps team stated that all EL and CL client teams have passed the relevant Hive tests for Devnet #7. His team plans to launch Devnet #7 as early as June 30 or July 3. Devnet #7 is a dedicated short-term test network for EIP-4844 and will not test other code changes.Additionally, developers are preparing to deprecate the public Goerli test network by the end of this year. To replace Goerli, the Ethereum client teams are launching a new testnet called Holesky, which will host an active validator set larger than both Goerli and the Ethereum mainnet. (Source link)

Chain Catcher news, the Web3 plug-and-play DevOps platform Hamster has completed the product testing of DevOps Scene I with no-threshold node deployment v0.1, with hundreds of registered users participating in this test. This product provides automated technology and tooling capabilities for continuous deployment, error correction, and operation and maintenance, as well as a series of functional components for blockchain projects migrating from EVM to other languages (such as MOVE language), including automatic smart contract conversion and automatic deployment.It is reported that Hamster is a platform providing DevOps services for Web3 projects, offering DevOps services to computing power contributors, technical developers, and computing power users, enabling them to visualize one-click deployment and achieve efficient operation and maintenance. It is currently integrating blockchains including Ethereum, Aptos, Sui, Polygon, and Avalanche, helping Web3 users achieve one-click node deployment. (Source link)