At least 15 attackers have exploited a Coldcard wallet vulnerability, pushing estimated losses to $100 million across three confirmed attack waves. The incident has sparked debate over cold storage security and AI's role in vulnerability discovery.
Hackers have stolen approximately $130 million in cryptocurrency from offline Coldcard hardware wallets by exploiting a vulnerability in seed phrase generation.
Apple limits vulnerability reports per researcher after its security portal is flooded with AI-generated submissions inventing non-existent flaws, temporarily blocking a Milan startup's real exploit chain.
Attackers drained over $130 million from Bitcoin Coldcard hardware wallets after a software build bug silently disabled the devices' true hardware random number generators for years, leaving seeds dangerously predictable.
Coldcard's newly disclosed random-number generator bug allowed an attacker to rebuild Bitcoin wallet seeds, leading to potential theft. The flaw, present in firmware versions 4.0.0 to 4.1.9 for Mk2/Mk3 and pre-5.6.0/6.6.0X for Mk4/Mk5/Q, highlights that seed randomness is crucial before air-gapping.
An analysis argues that Donald Trump's power grabs, characterized by constant scandals, a focus on loyalty over competence, and a spectacle of cruelty, create both autocratic consolidation and significant vulnerabilities, contrasting with 21st-century 'spin dictatorships' like Orbán's and Putin's.
Russian state-sponsored group TA488 is exploiting a maximum-severity Microsoft Outlook Exchange Server vulnerability (CVE-2026-42897) to install sophisticated OWAReaper malware, stealing credentials and gaining persistent access to OWA accounts.
Luke Littler's unprecedented dominance in darts, including multiple major titles, is compared to Tadej Pogacar's similar stranglehold on professional cycling. The article explores the public's complex reactions to such overwhelming athletic supremacy, ranging from admiration to accusations of "ruining" the sport, and reflects on the transient nature of even the greatest periods of dominance.
Coinkite's Coldcard hardware wallets experienced a flaw where seeds were generated from a software fallback instead of hardware, leading to an estimated $38 million in Bitcoin losses from 500 wallets. The company suspects AI was used to exploit the vulnerability.
A new multi-modal freight corridor via Uzbekistan and Turkmenistan reduces China-Afghanistan delivery times from 2-3 months to 30 days, though security and capacity concerns persist.
Zilliqa halted native transactions after discovering a vulnerability in its Ledger app's Schnorr signature generation, potentially allowing reconstruction of private keys from approximately five affected signatures, prompting a coordinated remediation plan.
US lawmakers are exploring tariffs, port fees, and sanctions against China's shipbuilding industry to rebuild America's commercial fleet. Citing economic and national security concerns, members of Congress acknowledge that penalties alone may not suffice to restore US capacity.
Layer-1 blockchain Zilliqa warned of a vulnerability in its Ledger app that could allow attackers to recover users’ private keys. Users who signed at least five native Zilliqa transactions with a Ledger device are considered compromised and advised to await guidance, following a recent ZIL cold wallet theft.
Aikido's Kimi K3 AI model detected 23 out of 26 known vulnerabilities, matching OpenAI's GPT-5.6 Terra performance but at a quarter of the cost of the flagship Sol model, indicating a significant leap for open-source AI capabilities.
Apple has patched a vulnerability in its iCloud+ Hide My Email feature that could expose users' real email addresses, 404 Media reports. While Apple deployed a fix on July 3, co-founder of EasyOptOuts, Tyler Murphy, warns that emails linked to Hide My Email addresses created before July 7, 2026, may still be exposed in third-party logs.
Hugging Face, an AI model and dataset hosting platform, disclosed an internal systems breach last week. Attackers exploited a security vulnerability in an uploaded dataset to run malicious code, gaining broader access and compromising service credentials. The company has revoked credentials and urged users to do the same, while investigating potential customer data theft.
Analysts warn the automotive industry's widespread use of over-the-air (OTA) technology for vehicle updates heightens cyberattack risks, posing national security concerns. Investigations in Norway, UK, and Denmark follow a bus company's discovery of vulnerabilities.
Campaigners warn the UK government's plan to boost intensive poultry farming for food security is a national security risk due to resource intensity, pollution, and reliance on imported feed, advocating for plant-based proteins instead.
Senator Mitch McConnell, 84, disclosed that a fall, which caused him to be briefly unconscious, led to his hospitalization and subsequent pneumonia. He cited generational reluctance to share vulnerability as the reason for the initial silence and stated he is now in rehabilitation and will not return to the Senate floor immediately.
Senator Mitch McConnell, 84, revealed a fall caused his recent hospitalization, addressing weeks of health speculation. He stated he underwent extensive tests, suffered no broken bones or concussion, and had a mild case of pneumonia. He is in rehabilitation and working with staff.
China's cybersecurity watchdog has flagged Anthropic's Claude Code AI tool for a "back-door vulnerability" that can transmit user data to remote servers. The warning comes amid escalating accusations between Anthropic and Alibaba over AI capabilities.
The Cybersecurity and Infrastructure Security Agency (CISA) is reportedly using Anthropic's AI model Mythos to scan government software for vulnerabilities, despite ongoing disputes between the Pentagon and Anthropic over AI safeguards. The scans have already identified numerous bugs.
Les salariés de RTE ont exercé leur droit d'alerte face aux risques d'explosion d'appareils sur le réseau électrique français dus aux canicules. Ils dénoncent le manque de mesures de protection et demandent l'identification et la sécurisation des équipements à risque.
Russia launched one of its largest combined missile and drone attacks on Ukraine, killing at least 18 people and injuring 60, primarily in Kyiv. Ukrainian officials cited critical air defense gaps due to a shortage of Patriot interceptor missiles, prompting President Zelenskyy to renew calls for more aid.
