PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

DevOps Tools Targeted for Cryptojacking

wiz.io | blog | #cloud-security | #devops | #threat-research | #cryptojacking | #jinx-0132 | #nomad | #consul
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz Threat Research exposes JINX-0132, a cryptojacking campaign targeting Nomad, Consul, Docker and Gitea — the first in-the-wild abuse of Nomad misconfigurations — living off GitHub tools.
Published
Collected

Related coverage

blog · wiz.io
Pause off my cluster: DERO cryptojacking takes a new shape
Wiz Research details an evolved DERO cryptojacking campaign abusing anonymous-access Kubernetes clusters to deploy UPX-packed miners from Docker Hub images, plus updated TTPs and IoCs.
blog · wiz.io
Democratizing FinOps with Wiz: Driving Cost Attribution with the Wiz Service Catalog
This coverage demonstrates how cloud security and cost telemetry can be united to give visibility across application architectures.
blog · wiz.io
Agentless Threat Detection: Illuminating Cloud Blind Spots
How Wiz Agentless Workload Detection spots hidden threats on virtual appliances: FortiGate exploitation via CVE-2026-24858, FortiBleed credential stuffing, Redis cryptojacking, and config theft.
blog · wiz.io
Why IaC Coverage Belongs on Your Security Dashboard
Rethinks IaC coverage as a three-stage funnel - IaC-supportable, tracked, declared - measuring how much cloud infrastructure is actually governed, traceable and fixable, not as a single percentage.
blog · wiz.io
Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense
Wiz's contribution to the 2026 Verizon DBIR: exploitation is now the top initial access vector (31% of breaches) and only 26% of known exploited vulnerabilities were remediated.
blog · wiz.io
The Jenkins Threat Landscape
Wiz data: Jenkins runs in over a third of cloud environments; 59% have instances vulnerable to critical core flaws, 87% contain end-of-life versions, and 48% use highly privileged service accounts.
Back