CyberWire Daily
Bybit’s $1.4B breach. [Research Saturday]
Apr 5, 2025
Zach Edwards, a researcher at Silent Push who specializes in North Korean cyberattacks and cryptocurrency heists, uncovers the dark intricacies of the $1.4 billion Bybit hack. He reveals how Lazarus Group's tactics, like fake job scams and VPN usage, pose significant risks to crypto users. The discussion highlights alarming connections to state-sponsored cybercrime and offers insights on improving cybersecurity through community collaboration. Edwards' research illustrates the urgent need for vigilance against the ever-evolving threat landscape in cryptocurrency.
35:32
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- The investigation into the $1.4 billion Bybit hack uncovered links to the Lazarus Group through new, malicious domains indicating sophisticated planning.
- Research highlights that traditional AppSec methods often fail to mitigate genuine risks, emphasizing the need to focus on the most impactful security issues.
Deep dives
Ineffective AppSec Programs and Their Costs
Many application security (AppSec) programs are failing to effectively reduce real risk, as highlighted by the alarming statistic that 95% of fixes do not address genuine threats. The conventional prioritization methods employed by traditional tools are often too generic, leading to an overwhelming number of alerts that can obscure high-impact threats. This inundation with critical alerts not only distracts teams but also results in significant financial implications, with threats that slip through costing ten times more to remediate after they reach production. Companies like Ox Security are now advocating for a more focused approach, directing attention towards the 5% of issues that truly matter before they can escalate in the cloud.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
