Featured topic
23 articles
Version 2.4.7 closes a critical vulnerability and several medium-severity flaws discovered by Anthropic's code scanner, as the self-hosted payment processor used by merchants across Europe urges administrators to update immediately.
Keystone disclosed unauthorized access to its website on October 24, joining Ledger, Trezor, SafePal, COLDCARD and BitBox as hardware wallet brands hit by security incidents this year.
A failed online pellet purchase in the Galician town of Ponteareas led Spain's Guardia Civil to a cross-border fraud network that converted stolen fiat into cryptocurrency within hours to dodge tracing.
Cloudflare's Matthew Prince says attack attempts against two critical PHP vulnerabilities, dubbed PHP2Shell, exploded after patches were released on 21 October, though evidence shows exploitation began days earlier.
Cloud development platform Railway confirmed an attacker accessed and decrypted customer environment variables, freezing deployments as researchers link the incident to hundreds of suspicious blockchain transactions.
Amazon's MadPot honeypot network recorded exploitation attempts against the critical PHP2Shell flaw four days before official patches were issued, a gap that security teams are now treating as a blind spot in their incident timelines.
China's Tianjin court has accepted a prosecution request to confiscate more than 61,800 bitcoin and other digital assets tied to fraud suspect Qian Zhimin, days after a UK High Court ruling found Chinese law governs claims to the crypto seized in Britain.
Charles Guillemet says critical bugs in PHP, Node.js and compromised TLS certificates have left hundreds of thousands of servers exposed, though Bitcoin's core protocol is unaffected.
Hardware wallets with hidden chips capable of reading recovery phrases have now surfaced in the newer Ledger Flex model, undermining Ledger's claim that the tampering was confined to a single Southeast Asian reseller.
An amendment to France's 2027 budget bill would force holders of self-custody crypto wallets worth over €100,000 to declare them, as the country records a sharp rise in physical attacks tied to digital assets.
A user who bought a Ledger wallet at a Mediamarkt store reported finding a hidden spy component inside, extending a supply-chain attack previously tied only to an Asian reseller.
Coldcard's official X account posted and quickly deleted a phishing link in the early hours of October 11. The bitcoin hardware wallet maker says its offline 2FA and credentials show no sign of compromise, but it is investigating possible unauthorised access at the platform level.
Analytics firm Onchain Lens has publicly called on Binance to audit and freeze accounts tied to funds stolen from buyers of a Ledger-authorized reseller, after 430.2 ETH moved through Tornado Cash.
Charles Guillemet dismissed warnings of an imminent AI-driven break of ECDSA signatures, arguing that recent mathematical advances remain theoretical and that a real collapse of asymmetric cryptography would take down far more than crypto wallets.
Ethereum co-founder Vitalik Buterin has responded to warnings from researcher Justin Drake about artificial intelligence threatening the cryptographic schemes securing Bitcoin, Ethereum and other networks, pointing to lattice-based systems as the area of greatest near-term concern.
Core Lightning has told operators to update to version 26.06.8 immediately after confirming active attacks against nodes running 26.06.7 or earlier, warning that funds held in routing channels could be at risk.
Guardia Civil investigated four members of a family in Cáceres for allegedly running a fake crypto investment scheme that used forged bank statements, staged events and more than 90 bank cards to move victims' money.
THORChain says its architecture cannot selectively freeze transactions, rejecting Bitget's request to stop attackers from moving stolen assets through the network.
Bitget has revised its estimate of funds stolen in a wallet breach to $387.5 million after adding zcash and tron to the list of compromised assets, and has launched a bounty programme offering 5% of recovered or frozen funds.
On-chain analysts have traced a portion of the funds stolen from Bitget to wallets linked to North Korea's Lazarus-affiliated TraderTraitor group, yet no government or agency has issued formal attribution, a striking contrast to the swift response after last year's Bybit hack.