BTC $65,981.64 +2.96%
ETH $1,934.92 +4.18%
BNB $575.41 +1.81%
XRP $1.12 +4.16%
SOL $78.53 +3.48%
TRX $0.3264 +0.16%
DOGE $0.0730 +1.95%
ADA $0.1750 +8.02%
BCH $223.42 +5.20%
LINK $8.71 +4.48%
HYPE $63.05 +3.75%
AAVE $94.58 +4.74%
SUI $0.7746 +4.10%
XLM $0.1908 +2.96%
ZEC $548.54 +3.18%
BTC $65,981.64 +2.96%
ETH $1,934.92 +4.18%
BNB $575.41 +1.81%
XRP $1.12 +4.16%
SOL $78.53 +3.48%
TRX $0.3264 +0.16%
DOGE $0.0730 +1.95%
ADA $0.1750 +8.02%
BCH $223.42 +5.20%
LINK $8.71 +4.48%
HYPE $63.05 +3.75%
AAVE $94.58 +4.74%
SUI $0.7746 +4.10%
XLM $0.1908 +2.96%
ZEC $548.54 +3.18%

sil

All
Article
Flash

Slow Fog Cosine: Claude Code exposes high-risk security vulnerabilities, malicious configuration files may silently execute commands

The founder of Slow Fog, Yu Xian, retweeted a tweet on the X platform regarding the potential poisoning attack risks of Claude Code and published an analysis of the poisoning attack details targeting Grok Build CLI and Claude Code CLI.It pointed out that the security mechanisms of Grok Build CLI are not unified, with different code paths having different trust assumptions, creating gaps that serve as channels for attackers. Attackers may execute arbitrary commands through malicious project configuration files without the user's knowledge, thereby stealing API keys, cloud credentials, or controlling local devices.Researchers constructed a testing environment and found that on Mac systems, if Claude Code is affected, executing specific test commands can trigger the local calculator to launch, proving the existence of potential command execution risks.If the attack is successful, attackers may further steal API keys from AI services like Claude and OpenAI, resulting in account cost losses, gain access to servers and data by obtaining cloud service credentials from AWS, Alibaba Cloud, Tencent Cloud, modify code repositories to implant backdoors, and use local devices as jump points to attack corporate internal networks. It is reported that the related vulnerabilities have existed for a year.

Vietnamese police report on the progress of the ONUS cryptocurrency fraud case: over 350 kilograms of gold and silver have been seized and more than 300 bank accounts frozen

According to Vietnam's Youth Newspaper, the Ministry of Public Security of Vietnam recently held a press conference to report the latest investigation results of the ONUS cryptocurrency platform fraud case. More than 350 kilograms of gold and silver have been seized, transactions involving 8 properties valued at 20 trillion Vietnamese dong have been frozen, and transactions of over 300 involved bank accounts have been suspended.On March 23 of this year, the police filed criminal charges against 8 defendants, accusing them of using computer networks and telecommunications networks to commit property appropriation and money laundering. Since 2018, the individuals involved have taken advantage of the public's lack of understanding of cryptocurrency, creating digital accounts through applications and packaging them as virtual currency. They established trust and attracted investment through circular buying and selling among affiliated companies, thereby committing fund appropriation, with a total sale of cryptocurrency valued at over 70 trillion Vietnamese dong from 2018 to 2021.The case involves numerous individuals and users, with approximately 5 million user accounts opened. The police have received over 2000 reports from citizens. The public security authorities are investigating the possible accomplice responsibilities of KOLs and other internet celebrities and continue to make every effort to recover the embezzled funds.
app_icon
ChainCatcher Building the Web3 world with innovations.