Bluepurple Pulse: week ending February 6th

Buckle up we are going to have to change some things..

Welcome to the weekly highlights and analysis of the blueteamsec subreddit. The subreddit turned four years old this week - 🥳🎂🎉, this was the note I put out to celebrate.

Operationally this week it is a mixed bag of ‘stuff’ but nothing overly notable.

In the high-level this week:

• Scammers are creating new fraudulent Crypto Tokens and misconfiguring smart contract’s to steal funds - organised crime are indeed organised.

• Crypto Worth Over $320 Million Taken in Wormhole Hack - the DeFi blood bath just continues in other ways - this thread gives a fascinating insight into the alleged technical root cause.

• buyers.json to eliminate malvertising, protect users, and restore a balanced relationship between buyers and sellers - an analogue to Certificate Transparency Logs for advertising - bold initiative - be interested to see what legs it actually develops in practice.

• Focusing on “Left of Boom” - Lots of wisdom in this post, we have a habit of focusing on the flash/bang not the aspects which …