Coldcard Seed Flaw: Update Firmware and Move Funds
Coldcard weak seed generation affects Mk3 and earlier Mk4, Mk5, and Q releases. Updating stops new weak seeds but does not repair an existing one. Check whether you must migrate.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
August 24, 2026
Latest reports
SvcHostUpdate.exe in Startup: The MythicalsGames Backdoor
SvcHostUpdate.exe in Windows Startup matches a malicious web3-token-helper chain. Learn what the file proves, what to preserve, how to clean the PC, and which…
Cisco FMC CVE-2026-20316 Exploited: Check and Patch
Cisco says attackers are exploiting a static credential in on-premises Secure FMC. Check for /var/tmp/license.tmp, install the release-specific hotfix, and rotate credentials, keys, and…
Joyfill npm Packages Compromised: Six Malicious Versions
Six prerelease versions of @joyfill/components and @joyfill/layouts carried an import-time RAT and credential stealer. Check lockfiles, isolate affected hosts, and rotate exposed secrets.
120 Fake Walmart Stores Target Card Details at Checkout
A network of more than 120 lookalike Walmart stores uses cloned catalogs, extreme liquor discounts, and a checkout that asks for the full card…
Dysphoria Botnet Hijacks Routers for DDoS and Proxy Relays
Dysphoria has grown to roughly 200,000 IoT bots and now uses blockchain-resolved command servers plus compromised relay nodes. Check routers, cameras, UPnP mappings, firmware,…
Operation BlueDash Uses Fake Teams Updates for Remote Access
Operation BlueDash turns a secure-document email into a fake Teams update that installs Level RMM and ScreenConnect. Check your exposure state and remove every…
CVE-2026-16812 Exploited in VeloCloud Orchestrator
Arista confirms active exploitation of CVE-2026-16812 in VeloCloud Orchestrator On-Prem. Check affected releases, observed IPs, log clues, and the patch-versus-rebuild decision.
MedusaHVNC Hijacks Browser Sessions on a Hidden Desktop
BlackFog analyzed MedusaHVNC, a Windows RAT that opens a browser on an invisible desktop and can use existing logged-in sessions. Check the five-stage chain,…