Trezor Data Breach Exposes Addresses of Nearly 14,000 Buyers
A ShipMonk breach exposed names, addresses, phones, and emails of 13,689 Trezor buyers. See who is affected and how to avoid seed theft.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
August 24, 2026
Latest reports
Fake CCleaner Installs GhostDesk Chrome Spyware
A counterfeit CCleaner installer adds GhostDesk spyware to Chrome, stealing cookies, credentials, screenshots, and clipboard data. Check exposure and clean Windows safely.
Zoom Zero-Click RCE CVE-2026-53413: Update Now
CVE-2026-53413 let a Zoom meeting participant run code on another participant’s device without a click. Check the fixed versions and update safely.
Gunra Ransomware Targets Windows and Linux, CISA Warns
A joint CISA/FBI advisory details Gunra ransomware, Windows .ENCRT and Linux .GNRA files, VPN entry paths, and evidence to preserve before recovery.
BdThemes Plugins Installed Backdoors Through a Poisoned API
Seven BdThemes WordPress plugins loaded a poisoned remote feed that created rogue admins and hidden webshells. Check the exact indicators and recover safely.
Solidity Pro VS Code Extensions Steal Wallets and API Keys
Malicious Solidity Pro extensions stole wallet data, API keys, SSH keys, and browser credentials. Check the exact IDs and recover safely.
11 MSI RadiX AXE6600 Flaws Allow Root Command Injection
Eleven critical flaws in MSI RadiX AXE6600 firmware v781521 allow root command injection. Update to v782418 and review router exposure.
NUL1DROPPER npm Malware Runs When a Package Is Imported
NUL1DROPPER runs when poisoned npm packages are imported, not through install scripts. Check dependency exposure, cross-platform artifacts, and the safe recovery order.
QuickFox VPN Malware Installed the FDMTP Backdoor
QuickFox Windows installers delivered the FDMTP backdoor. Check affected versions, local indicators, and what to do after running an older build.