Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Elastic Defend expands vulnerable driver coverage to 800+
Elastic Defend now detects over 800 vulnerable Windows drivers, adding automated troubleshooting and ARM support to block kernel-level attacks exploit
Hackers exploit software flaw in cold Bitcoin wallets to
Attackers are exploiting a software vulnerability in a popular brand of cold Bitcoin wallets, resulting in the theft of tens of millions of dollars in
Coldcard Bitcoin wallets exploited in ongoing security
Hackers are exploiting a software flaw in Coldcard Bitcoin wallets to compromise security keys.
Software Flaw in Cold Bitcoin Wallets Leads to
Hackers are exploiting a software vulnerability in a brand of cold storage Bitcoin wallets to siphon tens of millions of dollars from users.
Coldcard Hardware Wallet Vulnerability Leads to $89 Million
A five-year-old security flaw in a 2021 Coldcard hardware wallet firmware release has been exploited, resulting in the theft of approximately $89 mill
COLDCARD wallet RNG flaw linked to $88.6 million Bitcoin
A firmware vulnerability in COLDCARD hardware wallets caused a flawed random number generator to use deterministic values, allowing attackers to steal
Coldcard firmware vulnerability leads to $88 million in
A firmware flaw in Coldcard wallets allowed attackers to compromise seed generation, resulting in the theft of 1,196 Bitcoin addresses.
Coldcard Wallet Firmware Flaw Leads to $75 Million in
A critical firmware vulnerability in Coldcard hardware wallets has been exploited, resulting in the theft of over 2,600 wallet addresses and approxima
Ruby on Rails Active Storage Vulnerability CVE-2026-66066
JPCERT/CC has issued an alert regarding a critical vulnerability in Ruby on Rails Active Storage, tracked as CVE-2026-66066.
Apache Tomcat and TrendAI Vision One Vulnerabilities
New security vulnerabilities have been identified in Apache Tomcat (CVE-2026-66299) and TrendAI Vision One (JVNDB-2026-026086).
Apple Limits Bug Report Submissions Following Surge in
Apple has implemented caps on security bug report submissions after experiencing a significant influx of low-quality, AI-generated reports.
CISA Urges Utilities to Secure PLCs Following Attacks on
CISA has issued an urgent advisory for utilities to remove internet-exposed Programmable Logic Controllers (PLCs) after coordinated cyberattacks impac