Hudson Rock
15
MENTIONS
10
EPISODES
10
PODCASTS
Search complete. 15 mentions across 10 episodes found for "Hudson Rock".
Nov 4, 2026
Dave CunninghamGUEST
One's called SOC Radar.
Dave CunninghamGUEST
The other one is called Hudson Rock.
Dave CunninghamGUEST
And they are holding the data set.
Dave CunninghamGUEST
So for any organization that wants to know if they're in the data set, they just visit these sites.
BelindaHOST
So what actually happened? Polymarket said one of its third-party providers had been compromised and that affected traders would be made whole.
BelindaHOST
Hudson Rock, a threat intelligence firm, then examined a script served from DebugBear's servers and found wallet-draining code.
BelindaHOST
Security Week describes DebugBear as a UK-based performance monitoring company.
BelindaHOST
Debugbear said it was impacted by an ongoing security incident and told customers to remove its snippet.
BelindaHOST
Why could a monitoring tool do this? Think of it like giving the meter reader a key to your house, then letting them change what the key does whenever they like.
BelindaHOST
Your browser runs a supplier's script with the same authority as the site's own code.
BelindaHOST
Hudson Rock found no routine that steals passwords or seed phrases.
BelindaHOST
The script did something neater.
Professor CyberRiskHOST
The malicious JavaScript was hosted on infrastructure belonging to DebugBear, a website performance monitoring service.
Professor CyberRiskHOST
Security researchers at Hudson Rock identified the suspected attack-controlled wallet and the transactions made by the wallet.
Professor CyberRiskHOST
Trading resumed after the incident was resolved, and Polymarket announced that it would fully reimburse all affected trades.
Professor CyberRiskHOST
So at least they will be made whole as well.
Professor CyberRiskHOST
Crypto draining JavaScript is an instant, irreversible monetary theft, not data theft.
Professor CyberRiskHOST
Victims include retail trades with no security team.
Professor CyberRiskHOST
Hudson Rock's tracing of 2.5 million to an attacker wallet shows wallet attribution open source intelligence work is a functioning defense capability worth subscribing to.
Professor CyberRiskHOST
What can or should you be doing about this right now? Well, inventory all your third-party scripts on your web properties, whether that be RUM, analytics, your chat, your A, B tools, whatever.
Dave BittnerHOST
Blockchain security researchers traced more than $2.1 million in suspected cryptocurrency theft to a single account.
Dave BittnerHOST
Security firm Hudson Rock identified the compromised provider as website performance company DebugBear, which separately acknowledged a security incident and urged customers to remove its embedded code.
Dave BittnerHOST
Researchers discovered malicious code apparently designed to identify cryptocurrency wallets and transfer their assets to an attacker-controlled account.
Dave BittnerHOST
Polymarket removed DebugBear's code from its website.
Doug WhiteHOST
It was like an hour.
Doug WhiteHOST
Now, Hudson Rock identified a suspected attacker wallet in the script, and they said that 28.6 million Polygon coins were transferred into the wallet.
Doug WhiteHOST
That's about $2.54 million, or again, about 500,000 ducks.
Doug WhiteHOST
Polymarket, if you don't know what it is, is a place where you can gamble on just about anything using crypto coins.
Doug WhiteHOST
It was like an hour.
Doug WhiteHOST
Now, Hudson Rock identified a suspected attacker wallet in the script, and they said that 28.6 million Polygon coins were transferred into the wallet.
Doug WhiteHOST
That's about $2.54 million, or again, about 500,000 ducks.
Doug WhiteHOST
Polymarket, if you don't know what it is, is a place where you can gamble on just about anything using crypto coins.
Jake CrepsHOST
I'd be curious to see if there's any of them written in Rust, which is even more performant, but that's an aside.
Jake CrepsHOST
It does check a variety of different databases like Hudson Rock, Proxy Nova, and Breach Directory, where a lot of this information is coming from.
Jake CrepsHOST
So in addition, like I said in the article before, if you're trying to remove your digital record online, or those are your friends and family, or maybe even a client, you can use reverse image search.
Jake CrepsHOST
And you're not in reverse image search, you can use Go Search to be able to look up usernames that you know are matched to your accounts.
Doug WhiteHOST
It was like an hour.
Doug WhiteHOST
Now, Hudson Rock identified a suspected attacker wallet in the script, and they said that 28.6 million Polygon coins were transferred into the wallet.
Doug WhiteHOST
That's about $2.54 million, or again, about 500,000 ducks.
Doug WhiteHOST
Polymarket, if you don't know what it is, is a place where you can gamble on just about anything using crypto coins.
PeterHOST
And I've got some comments here from the International Cyber Digest.
PeterHOST
They state here that the hacker, Kot, breached 924 more Fortinet firewalls than first known, Hudson Rock says.
PeterHOST
They hold 40,573 clear text secrets, including 1,576 Active Directory bind passwords.
PeterHOST
And here is another comment from the team as well.
Adrian CulleyHOST
The U.S. Secret Service being involved very, very much implies there's a significant economic aspect to this.
Adrian CulleyHOST
The public timeline is that SOC Radar and Hudson Rock disclosed in mid-June.
Adrian CulleyHOST
ESA urged hardening on the 18th of June and Fortinet published on the 19th.
Adrian CulleyHOST
The agency's own IP observations run from mid-June to late July.
9 MINS LATER
Adrian CulleyHOST
Scanned, credentialed, fully compromised, encrypted.
Adrian CulleyHOST
Even the headline count is contested.
Adrian CulleyHOST
BitSight reported more than 73,000 firewalls and reporting on the Hudson Rock data described 73,932 URLs against SOC Radar's 86,644.
Adrian CulleyHOST
The sensible reading isn't an exact number, it's that a very large credential set exists and several credible sources agree it matters.