News
Mercado Bitcoin hack: how one signing breach drained $46 million across ten blockchains
Mercado Bitcoin halted withdrawals after a $46M multi-chain drain. See the on-chain trail, the signing-layer failure, and how far Tether's USDT freeze went
Proton AI Coding Mandate: Is Zero-Access Encryption at Risk?
Leaked Slack chats show Proton pushing AI-written code and questioning pentests. Here is what that means for SRP-6a, OpenPGP and post-quantum keys
Name.com DNS Hijack: How Step Drainer Hit 12 DeFi Protocols Through the Registrar
A Name.com registrar compromise redirected 12 DeFi domains to Step Drainer on Oct 31, 2026. Timeline, how the drain works, and how to defend
Binance $6.3B Hack Explained: How EIP-7702 Exposed a Crypto Custody Flaw
The October 29, 2026 Binance breach drained about $6.3 billion. Here is how attackers abused EIP-7702, why HSMs could not stop it, and what exchanges must change
Claude Code Extension Backdoor on Open VSX: Analysis and IOCs
A trojanized anthropic.claude-code 2.1.313 on Open VSX planted an SSH backdoor and reverse tunnel. See how it works, the IOCs, and how to respond
Polymarket Frontend Hack: How a Third-Party Script Drained Wallets
A breakdown of the October 29, 2026 Polymarket frontend supply-chain attack: the DebugBear RUM script, the timeline, why CSP and SRI fell short, and how to defend
Coinbase Amplitude Breach: What the Third-Party Leak Exposed
Coinbase says no customer funds were affected by the Amplitude analytics breach. See the confirmed timeline, the exposed data and what remains unknown
GoAhead TLS Vulnerabilities Explained: CVE-2026-115881 and CVE-2026-115884
Three GoAhead embedded web server TLS vulnerabilities, explained with code: a missing CRL check, a chain-depth bypass and a one-byte DH prime. Fixed in 6.1.1
CVE-2026-97631: How a 16-Year-Old EDK II PXE Bug Exposes UEFI Firmware Before the OS Loads
CVE-2026-97631 is a CVSS 9.5 EDK II PXE flaw that lets a LAN attacker corrupt UEFI firmware before Secure Boot. Impact, root cause and fixes
PSN Account Hack: Why Passkeys and 2FA Didn’t Stop It
Passkeys and 2FA didn’t stop recent PSN account hack. See how weak support recovery and family-group flaws bypass strong authentication
