⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine.
A critical firmware flaw in Coldcard hardware wallets, manufactured by Canadian firm Coinkite, allowed an attacker to steal 1,082.65 BTC (worth $70.2 million at the time) from 1,196 Bitcoin addresses in just 41 minutes on July 30. The vulnerability stemmed from a March 2021 firmware integration error that routed seed generation to a deterministic software pseudorandom number generator (PRNG) instead of the intended STM32 hardware random number generator (RNG).
A firmware flaw in Coldcard hardware wallets allowed an attacker to drain 1,196 Bitcoin addresses in 41 minutes, stealing about $70.2 million. The flaw caused seed generation to use a deterministic pseudorandom number generator instead of the hardware random number generator.
A firmware flaw in Coldcard hardware wallets allowed an attacker to drain 1,196 Bitcoin addresses in 41 minutes, stealing about $70.2 million. The flaw caused seed generation to use a deterministic pseudorandom number generator instead of the hardware random number generator.
A critical vulnerability in Rails' Active Storage framework allows unauthenticated attackers to read arbitrary files and potentially achieve remote code execution. Users should apply the patch immediately.
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE).