Stories tagged “Exploit.”
30 stories
Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks. The flaw, tracked as CVE-2026-69836, allowed threat actors with no privileges to gain code execution in low-complexity …
Coinkite has released firmware updates for Coldcard hardware wallets, requiring user-supplied entropy to strengthen seed phrase generation after an exploit led to $112 million in Bitcoin losses. Users must generate new seed phrases to secure their funds.
Harmony plans to roll back its blockchain to Aug. 11 following an exploit that created forged ONE tokens, discarding more than 109,000 transactions confirmed after its chosen checkpoint.
Bitcoin thefts from Coldcard hardware wallets are slowing but total losses continue to rise, with Galaxy Research confirming over 1,778 BTC ($112 million) stolen and suspecting a higher total of 2,417 BTC.
Security researchers have disclosed new 'Plug and Pwn' attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges.
A $100 million Coldcard hardware wallet exploit, caused by a five-year-old firmware flaw, has prompted Bitcoin holders to re-evaluate and strengthen their self-custody security, moving towards collaborative multisig solutions.
Air-gapped wallets protect private keys from online attacks, but the Coldcard exploit shows they're not immune to threats. Over $114 million in user losses highlights the importance of offline security.
A solo miner scored a major win even as the broader market frets over a multimillion-dollar Coldcard hardware wallet exploit. The miner successfully packaged block 960,804 early Monday, earning a block reward of 3.157 BTC valued at approximately $199,300.
A fourth wave of attacks targeting Bitcoin held in Coldcard-generated addresses is ongoing, with an estimated 1,816 BTC (around $114 million) moved from over 5,200 addresses since July 30. Unlike previous waves, these transactions use replace-by-fee, offering victims a ch…
The Coldcard exploit is ongoing, with Galaxy Research now tracking about $88.6 million stolen across 4,585 addresses in three waves. The breach has spurred an unusual reversal of the 'not your keys, not your coins' ethos as users move Bitcoin back to exchanges.
Binance founder Changpeng 'CZ' Zhao is warning crypto owners not to place blind faith in hardware wallets, following an exploit that drained tens of millions of dollars in Bitcoin from users. The exploit, which occurred due to a firmware build error in a March 2021 Coldca…
vBulletin has fixed a critical pre-auth RCE flaw in its forum software, tracked as CVE-2026-61511, which affects versions 5.x and 6.x up to 5.7.5 and 6.2.1. The flaw allows unauthenticated attackers to execute arbitrary PHP code through template rendering.
A critical command injection vulnerability (CVE-2026-16812) in on-premises Arista VeloCloud Orchestrator (VCO) is under active exploitation, allowing remote code execution and potential system compromise. Arista has released patches and provided indicators of compromise.
A proof-of-concept exploit for the Certighost vulnerability in Windows Active Directory Certificate Services has been released, allowing attackers to potentially compromise a Windows domain. The vulnerability was fixed by Microsoft as part of the July 2026 Patch Tuesday s…
Garden Finance temporarily took its app offline after blockchain security firm Blockaid reported an exploit targeting the protocol's hash time-locked contracts (HTLC) across four blockchain networks.
A security researcher has published a working proof-of-concept (PoC) exploit that executes commands as git on an unpatched self-managed GitLab 18.11.3 server. The exploit is build-specific to GitLab 18.11.3 on x86-64 and affects broader releases.
Magnet Forensics is suing Paradigm Shift Technology over its publication of usbliter8, an unpatchable Apple chip exploit. The company claims the exploit was developed using stolen trade secrets from a former engineer.
Balance Coin, an algorithmic stablecoin, has fallen more than 99% following a reported exploit. The stablecoin is currently trading at $0.001358, down from $0.9954.
Hackers are exploiting the wp2shell critical vulnerability suite affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers.
Allbridge Core, a cross-chain stablecoin bridge, has paused its protocol after a security incident that resulted in a $1.65 million exploit. The attacker allegedly used a flash loan and rapid swaps to manipulate the bridge's stablecoin exchange rate.
WordPress Core has been hit with critical 'wp2shell' remote code execution vulnerabilities, tracked as CVE-2026-63030 and CVE-2026-60137. Public exploits have been released, making it essential for administrators to patch their sites immediately.
A security researcher has released a Windows zero-day exploit dubbed LegacyHive that allows attackers to escalate privileges on up-to-date Windows systems. The exploit abuses a security vulnerability in the Windows User Profile Service, which has yet to receive a CVE ID f…
A hacker exploited Ostium's price-feed automation system, submitting oracle reports with manipulated future timestamps to make losing trades appear profitable, triggering an $18 million USDC payout from the protocol's vault.
A security researcher has released a new proof-of-concept exploit called LegacyHive, which targets a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The exploit is functional on all supported desktop and server versions of Windows, …
CISA Urges SharePoint Hardening After New Exploitations
CISA has issued an alert regarding active exploitation of multiple vulnerabilities (CVE-2026-32201, CVE-2026-45659, CVE-2026-56164) in on-premises SharePoint Server instances, enabling unauthorized access and remote code execution. The agency urges organizations to apply …
Two maximum-severity security flaws in iCagenda and Balbooa Forms Joomla extensions, rated 10.0 CVSS, have been added to CISA's KEV catalog due to active zero-day exploitation.
Hedera-based lending protocol Bonzo Lend suffered a $9 million loss due to an oracle exploit that allowed an attacker to inflate the value of SAUCE collateral and borrow assets far exceeding its real worth.
A cybercrime crew left a server open on the internet for three weeks, exposing its hacking tools, activity logs, and target lists naming over 1.4 million websites. The operation, tracked as WP-SHELLSTORM, is a webshell access brokerage that breaks into sites at scale, pla…
Microsoft has patched a Defender vulnerability known as RoguePlanet, which can grant SYSTEM privileges.
Microsoft has released a security patch to address a Defender zero-day vulnerability known as 'RoguePlanet,' disclosed after the June 2026 Patch Tuesday. The flaw affects fully patched Windows 10 and Windows 11 devices, allowing attackers to spawn a command prompt with SY…