math.random

Title/body text match only.

• CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

  CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript cryptography library 12 years ago, the fu

• The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

  The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors Introduction Google Threat Intelligence Group (GTIG) has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks i

All reports →