
Coldcard’s Hidden Bug Since March 2021: $70 Million in Bitcoin Vanish in 41 Minutes
$70M Bitcoin stolen due to a Coldcard hardware wallet firmware bug from March 2021. Learn about the flaw, affected devices, and required security actions.

$70M Bitcoin stolen due to a Coldcard hardware wallet firmware bug from March 2021. Learn about the flaw, affected devices, and required security actions.

A critical Ruby on Rails Active Storage flaw, CVE-2026-66066, allows unauthenticated users to read files and steal secrets. Learn how to patch it.

Adobe patched a critical CVSS 10.0 RCE flaw in Campaign Classic and eight critical vulnerabilities in Adobe Bridge. Update immediately.

Arch Linux halted AUR package adoption after malicious actors exploited the system to distribute a two-stage infostealer and RAT malware.

Amgen reports a cyberattack on third-party cloud servers, exposing protected health data and trade secrets. The SEC was notified, and HIPAA rules apply.

Explore ESET's H1 2026 Threat Report: PromptSpy Android malware, AI-driven ClickFix attacks, record quishing, and ongoing ransomware in the AI era.

South Korean agencies warn of state-sponsored zero-click watering hole and phishing attacks exploiting local software to steal data and extort victims.

Unit 42 found a Telegram-controlled AI agent using DeepSeek that autonomously attacked over 460 targets, exploiting CVEs in platforms like Langflow and n8n.

CISA alerts of 30 water PLC breaches in Minnesota. Discover how attackers targeted OT devices via cellular modems and how to secure your infrastructure.