Episode Details

Daily Cyber News: Third-party security failure precedes $388 million Bitget theft

About three hundred eighty eight dollars million was stolen from Bitget after an attacker reportedly exploited a vulnerability in a third-party security product used by the exchange. The attacker obtained high-level internal credentials through that product and then used them on September 24th to send fraudulent withdrawal commands to Bitget’s wallet system. The important point is that the attacker didn’t need to steal private keys directly.

Key context: This puts the trust model around security suppliers under pressure.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, vulnerability, Third-party, security, failure, precedes, million, Bitget.