Security· ★★★· bearish·

PHP2Shell flaw lets attackers run code on exchange servers without authentication

  • —The flaw enables unauthenticated remote code execution on exchange servers
  • —Private keys are not directly stolen, but attacks leave almost no trace
  • —Verifying exchange security amounts to trusting their public statements
Why it matters: Stealthy server-side exploits undermine confidence in exchanges' security assurances and raise the risk of undetected infrastructure compromise.
Source: CriptoNoticias
More on this
Security · Sep 30
Apple Patches iOS Flaw That Could Let Attackers Run Malicious Code on iPhones
 Security · Sep 20
AI auditors find old crypto code flaws in Zcash, Coldcard as attacks rise
 Security · Oct 10
Telegram Desktop Flaw Could Have Let Attackers Steal Crypto Wallet Files