Bitget hacked via zero-day in third-party security products
-
Bitget has disclosed that the attackers behind last week's theft of $387.5 million gained access to its systems by exploiting a zero-day vulnerability in third-party security products.
The exchange published details of the breach, confirming the incident resulted from a previously unknown flaw in external security tooling rather than a direct compromise of its own core infrastructure. The zero-day was leveraged as the initial access vector, allowing the attackers to breach Bitget's environment.
Key points:
- The attacker exploited a zero-day flaw in third-party security products to breach Bitget's systems.
- The total amount stolen in the incident was $387.5 million.
- The breach occurred last week, with Bitget disclosing the root cause today.
- No specific CVE identifier has been provided for the flaw at this time.
This case highlights the supply chain risk that third-party security software can introduce, even for organizations with otherwise robust internal defenses. When a security product itself becomes the entry point, traditional perimeter controls may offer limited protection.
Source: Unknown
Does your organization review the security posture of its third-party security vendors, and how are you mitigating supply chain risk in your stack?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login