Cybersecurity

Coldcard Firmware Flaw Drains $70M in Bitcoin Heist

An attacker swept 1,082.65 BTC (~$70.2 million) from 1,196 Bitcoin addresses in 41 minutes by exploiting a predictable random number generator flaw in Coldcard...

Adform supply-chain attack swaps crypto wallet addresses

Attackers modified Adform’s JavaScript file to rewrite Bitcoin, Ethereum, and Tron wallet addresses on July 27, 2026.The malicious code replaced addresses both via clipboard...

Chinese hackers target Central Asian governments with new backdoors

A Chinese-speaking threat actor has targeted government organizations in Central Asia and Syria since January 2025, using two new backdoors.Kaspersky researchers identified the malware...

Google fixes 1,072 Chrome bugs, surpasses past 23 milestones

Google fixed 1,072 security bugs in Chrome versions 149 and 150, surpassing the total from the prior 23 milestones combined.A critical sandbox escape vulnerability...

North Korea macOS Malvertising Uses Fake Update, Blockchain C2

North Korean hackers are using a fake macOS update screen to trick users into running malicious Terminal commands.The campaign employs blockchain-hosted command-and-control (C2) via...

Azure Cosmos DB flaw could let attackers access all tenant databases

Security researchers at Wiz discovered a vulnerability in Azure Cosmos DB that could have allowed an attacker to gain full read and write access...

Hidden Word prompts worm through Copilot, alter figures

Hidden instructions in Word documents can make Microsoft 365 Copilot rewrite financial figures and copy the same payload into the finished file, according to...

FCC bans foreign robots, power inverters from US market

The FCC added foreign-produced mobile robots and networked power inverters to its Covered List on July 28, blocking new models from import, marketing, or...

Latest news

Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.

Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...

Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached

Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...

CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV

CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...