Security & privacy By Ren
Know what changed. Know what matters.
Understand the security and privacy stories behind the headlines, without jargon or fear-driven noise.
Explore the coverage
Find a story by topic or search the full archive.
Adform Script Rewrites Crypto Wallet Addresses on July 27
An Adform‑served JavaScript file rewrote cryptocurrency wallet addresses on July 27, exposing users to potential phishing.
Read storyColdcard Wallet Exploit Enables $70 Million Bitcoin Heist
A firmware flaw in Coldcard wallets let attackers drain over 1,000 accounts for roughly $70 million on July 30.
Read storyHotel Wi-Fi Hijack Delivers Surveillance Trojan
A hijacked hotel Wi‑Fi network pushed a fake browser update that installed CornFlake, enabling attackers to record webcams, microphones, and keystrokes of guests.
Read storyChinese‑Speaking Threat Actors Target Central Asian Governments
A suspected Chinese‑speaking threat group has been attacking government organizations across Central Asia using OctLurk and SilkLurk since January 2025.
Read storyDevice Code Phishing Surge Threatens Smart Devices
OAuth-based device code phishing has exploded into an industrial‑scale threat targeting IoT devices, raising privacy risks worldwide.
Read storyNorth Korean Actors Target macOS Users With Fake Update Malware
Threat actors linked to North Korea deployed fake macOS updates that deliver crypto‑stealing malware.
Read storySouth Korean Sites Used to Install Promptless Backdoors via AnySign4PC
Hackers leveraged trusted Korean web pages to inject SIGNBT or COPPERHEDGE backdoors into AnySign4PC installers, allowing covert surveillance without user prompts.
Read storyRails Active Storage Flaw Lets Unauthenticated Users Read Server Files
Ruby on Rails’ Active Storage vulnerability (CVE‑2026‑66066) lets attackers upload images that reveal server secrets.
Read storyCheck Point SmartConsole Authentication Bypass Exploited
A critical login flaw in Check Point’s SmartConsole allows attackers to impersonate administrators using valid session tokens.
Read story24,650 Exposed BMCs Reveal IPMI Password Hashes
Researchers found 24,650 out of 36,872 exposed Baseboard Management Controllers disclosing pre‑login password hashes via IPMI.
Read storyJetBrains Issues Patch for Critical TeamCity Vulnerability
A critical flaw in JetBrains’ on‑premises TeamCity allows attackers to run arbitrary OS commands without authentication.
Read storyDysphoria Botnet Adopts Blockchain C2 After JackSkid Disruption
After law‑enforcement action on JackSkid, the Dysphoria IoT botnet switched to blockchain-based command and control, making takedowns harder.
Read story