Author: HackWatchit
Rules File Backdoor: AI Code Editors exploited for silent supply chain attacks Pierluigi Paganini March 19, 2025 The Rules File Backdoor attack targets AI code editors like GitHub Copilot and Cursor, making them inject malicious code via a supply chain vulnerability. Pillar Security researchers uncovered a dangerous new supply chain attack vector called ‘Rules File Backdoor.’ Threat actors could use the technique to silently compromise AI-generated code by injecting malicious code. The attack targets AI code editors like GitHub Copilot and Cursor. The Rules File Backdoor attack exploits hidden Unicode and evasion tactics to trick AI code assistants into injecting undetectable…
Cloudflare launched the Cloudforce One threat events platform to provide real-time intelligence on cyberattacks occurring across the Internet. Based on telemetry from Cloudflare’s massive global network, Cloudforce One’s threat events platform helps security teams get more done with the same resources by spotting issues faster, responding to threats quickly and staying one step ahead of how cybercriminals operate and what systems they target. Every day, cybercriminals change tactics, finding new vulnerabilities to exploit and ways to overwhelm their victims. What’s more, cybercrime costs are projected to reach $10.5 trillion in 2025. For organizations to keep up, they need to understand…
Arizona-based Western Alliance Bank is notifying nearly 22,000 customers their personal information was stolen in October after a third-party vendor’s secure file transfer software was breached. Western Alliance is a wholly owned subsidiary of Western Alliance Bancorporation, a leading U.S. banking company with over $80 billion in assets. The bank first revealed in a February SEC filing that the attackers exploited a zero-day vulnerability in the third-party software (disclosed by the vendor on October 27, 2024) to hack a limited number of Western Alliance systems and exfiltrate files stored on the compromised devices. Western Alliance found that customer data was…
Fiserv has acquired CCV, a payment solutions provider operating in the Netherlands, Belgium and Germany. The payments technology firm announced the deal Wednesday (March 19) morning, saying it allows Fiserv to speed deployment of its Clover point-of-sale (POS) platform throughout Europe. Financial terms of the purchase were not disclosed. Founded in 1958, CCV’s services include transaction processing, online and closed-loop payments, acquiring and a range of in-store and self-service payment terminals. According to a Fiserv news release, CCV “has been a pioneer in payments,” having facilitated the first electronic payments in its home country of the Netherlands 55 years ago. …
u-blox, a vendor of positioning and short-range communication technologies for automotive, industrial and consumer markets, has announced the latest update on NEO-F10T, a compact dual-band GNSS timing module designed to meet the most stringent 5G timing requirements. The new variant of the NEO-F10T includes superior security features, including Galileo OSNMA (Open Service Navigation Message Authentication), making it an ideal solution for private networks and telecommunications infrastructure. The NEO-F10T delivers nanosecond-level timing accuracy and incorporates advanced security protocols such as Galileo OSNMA (Open Service Navigation Message Authentication), secure boot, and secure interfaces. These features ensure the highest level of timing integrity…
The rise of connected devices has fundamentally reshaped industries, enabling unprecedented levels of automation, efficiency, and innovation. These devices fall under the Extended Internet of Things (XIoT), a broad category encompassing traditional Internet of Things (IoT) devices, operational technology (OT), industrial control systems (ICS), the Internet of Medical Things (IoMT), and other connected assets that span enterprise IT and operational environments. While XIoT unlocks immense opportunities, it also introduces new risks. The rapid convergence of IT and XIoT environments has expanded the attack surface, making traditional security approaches obsolete. Organizations must rethink their cybersecurity strategies to address the unique risks…
The post Talkin’ About Infosec News – 9/22/2022 appeared first on Black Hills Information Security.
Coinbase has launched Verified Pools, a Know-Your-Customer (KYC)-verified liquidity pool designed to enhance DeFi adoption while reducing counterparty risks.This new initiative provides institutional and retail traders with compliant access to on-chain liquidity.Coinbase CEO Brian Armstrong highlighted that some digital assets require specific regulatory approvals under US law. He noted that Verified Pools will allow users to get verified and trade assets securely on-chain, creating a new standard for compliant DeFi engagement.Verified PoolsVerified Pools will allow users to connect their wallets—Coinbase Wallet, Prime Onchain Wallet, or third-party wallets—to a Coinbase Verifications credential. This credential acts as a trust badge, verifying users…
TXOne Networks announced Version 3.2 of its Stellar solution, further enhancing its capabilities from endpoint protection to more comprehensive detection and response in operational technology (OT) environments. Stellar simplifies the journey into threat hunting and detection while overcoming the limitations of traditional information technology (IT) endpoint detection and response (EDR) solutions, which can disrupt OT operations and productivity. Purpose-built for OT environments, Stellar ensures effective security without compromising system stability. “We have observed that alert fatigue, which is common to EDR solutions, can be even more severe in OT security, with security teams feeling overwhelmed by warnings due to the…