Derwent Cyber Security

22/09/2025

ALERT: Infostealers are increasingly targeting crypto wallets.

A recent malicious to a free-to-play Steam game got a lot of attention after a livestream showed attackers draining a crypto wallet. This is a stark reminder that infostealers aren't just after your login credentials—they're now targeting your crypto.

Stay vigilant! Avoid storing crypto wallets on gaming devices.

16/09/2025

More NPM badness just dropped, if you are a developer (or anyone) and use tinycolor you NEED to go into incident response mode! link: www.stepsecurity[.]io/blog/ctrl-tinycolor-and-40-npm-packages-compromised -actions-required

09/09/2025

The supply chain attack effecting NPM ended before it had even begun!

Due to the quick response from the original victim and the security community, all the malicious packages were removed with no downloads recorded.

Below is an image of the phish and a reminder to users to remain vigilant when interacting with emails requesting changes to sensitive information.

08/09/2025

Big deal supply chain attack!

Any developers that use NPM package manager, you need to assume compromise and take appropriate action!

If you need any advice feel free to fire over a message.

https://www.bleepingcomputer.com/news/security/hackers-hijack-npm-packages-with-2-billion-weekly-downloads-in-supply-chain-attack/

https://x.com/cyb3rops/status/1965113516190552441

04/09/2025

Welcome to DerwentSec! We are a cybersecurity company dedicated to making digital security simple and accessible for everyone.

As we get everything set up here, please feel free to explore our website to learn more about our mission and the services we offer, including password security, threat removal, data recovery, and more.

Your security is our mission.

Visit our website:

Welcome to Derwent Security. We translate complex security topics into simple, actionable steps to protect your digital life. Your security is our mission.