Hardware Wallet

Keystone Wallet Data Breach Exposes Customer Orders

Keystone wallet data breach diagram showing Shopify API order leak and physical wrench attack risks

Keystone Wallet Data Breach Exposes Customer Orders

Do Son October 26, 2026

Cryptocurrency hardware wallet manufacturer Keystone recently disclosed an unauthorized intrusion into its web platform. Specifically, security engineers...

Ledger Supply Chain Attack Hits Europe via Tampered Wallets Ledger Nano X hardware wallet dismantled showing malicious LTE module modification

Ledger Nano X hardware wallet dismantled showing malicious LTE module modification

Ledger Supply Chain Attack Hits Europe via Tampered Wallets

Do Son October 13, 2026

Investigators previously discovered that a Malaysian distributor for the French cryptocurrency hardware wallet manufacturer Ledger systematically tampered...

The Devastating Ledger Security Breach Ledger hardware wallet hack modified Nano X circuit board

Ledger hardware wallet hack modified Nano X circuit board

The Devastating Ledger Security Breach

Do Son October 11, 2026

The prominent French cryptocurrency hardware wallet manufacturer Ledger recently suffered a severe security breach. In this breach,...

COLDCARD Exploit Grows to 1,367 BTC Stolen Across Three Waves COLDCARD hardware wallet exploit growing to 1,367 BTC stolen across three attack waves from 4,585 wallets, tracked by Galaxy Research on-chain analysis

COLDCARD hardware wallet exploit growing to 1,367 BTC stolen across three attack waves from 4,585 wallets, tracked by Galaxy Research on-chain analysis

COLDCARD Exploit Grows to 1,367 BTC Stolen Across Three Waves

Do Son August 3, 2026

Recently, we covered the critical security failure in the Canadian hardware wallet COLDCARD. A flawed random-number algorithm...

COLDCARD Seed Flaw Let Hackers Steal 594 BTC in 15 Minutes COLDCARD hardware wallet seed generation flaw that shrank entropy from 128 bits to 40 bits, enabling theft of 594 BTC from 500 wallets in 15 minutes

COLDCARD hardware wallet seed generation flaw that shrank entropy from 128 bits to 40 bits, enabling theft of 594 BTC from 500 wallets in 15 minutes

COLDCARD Seed Flaw Let Hackers Steal 594 BTC in 15 Minutes

Do Son August 1, 2026

The respected Bitcoin hardware wallet COLDCARD has disclosed a severe security failure. A build error dating back...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2026-109619CVSS 9.2
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not...
CISA KEV📅 Added to KEV: Oct 26, 2026
CVE-2026-109618CVSS 9.2
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request....
CISA KEV📅 Added to KEV: Oct 26, 2026
CVE-2026-106173CVSS 9.8
A improper limitation of a pathname to a restricted directory (\'path traversal\') vulnerability in Fortinet FortiSIEM 7.5.0 may...
Admin intel📅 Updated: Oct 25, 2026
CVE-2014-125133CVSS 8.7
NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
Watchtower Verified📅 Updated: Oct 24, 2026
CVE-2015-20128CVSS 8.8
FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
Watchtower Verified📅 Updated: Oct 24, 2026

CVE-2026-109391CVSS 9.2
Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML...
📅 Updated: Oct 27, 2026
CVE-2026-105223CVSS 9.1
maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data,...
📅 Updated: Oct 27, 2026
CVE-2026-105216CVSS 9.1
go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
📅 Updated: Oct 27, 2026
CVE-2026-105222CVSS 9.1
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer...
📅 Updated: Oct 27, 2026
CVE-2020-37281CVSS 9.2
Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any...
📅 Updated: Oct 27, 2026
CVE-2018-25254CVSS 9.3
NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code...
📅 Updated: Oct 27, 2026
CVE-2026-115557CVSS 9.4
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even...
📅 Updated: Oct 27, 2026
CVE-2026-74014CVSS 9.9
Subscriber Arbitrary File Upload in IT Residence
📅 Updated: Oct 26, 2026