Seed Phrase

CryptoJS Randomness Vulnerability Drains Crypto Wallets

CryptoJS randomness vulnerability Ill Bloom crypto wallet seed phrase attack draining funds across multiple chains

CryptoJS Randomness Vulnerability Drains Crypto Wallets

Do Son August 7, 2026

TL;DR A weak random number generator inside CryptoJS produced predictable wallet seed phrases for over a decade....

COLDCARD Seed Flaw Let Hackers Steal 594 BTC in 15 Minutes COLDCARD hardware wallet seed generation flaw that shrank entropy from 128 bits to 40 bits, enabling theft of 594 BTC from 500 wallets in 15 minutes

COLDCARD hardware wallet seed generation flaw that shrank entropy from 128 bits to 40 bits, enabling theft of 594 BTC from 500 wallets in 15 minutes

COLDCARD Seed Flaw Let Hackers Steal 594 BTC in 15 Minutes

Do Son August 1, 2026

The respected Bitcoin hardware wallet COLDCARD has disclosed a severe security failure. A build error dating back...

“SeedSnatcher” Android Malware Targets Crypto Users, Using Overlay Phishing and BIP 39 Validation to Steal Seed Phrases SeedSnatcher Crypto Malware, Android Overlay Phishing

SeedSnatcher Crypto Malware, Android Overlay Phishing

“SeedSnatcher” Android Malware Targets Crypto Users, Using Overlay Phishing and BIP 39 Validation to Steal Seed Phrases

Do Son December 8, 2025

A dangerous new Android malware campaign dubbed “SeedSnatcher” is actively targeting cryptocurrency users by masquerading as a...

Spyware Reloaded: SparkKitty Stalks Crypto Wallets via TikTok Mods and Fake Apps

Spyware Reloaded: SparkKitty Stalks Crypto Wallets via TikTok Mods and Fake Apps

Do Son June 24, 2025

Kaspersky Labs has uncovered a stealthy evolution of mobile spyware connected to the infamous SparkCat campaign. Dubbed...

Google Play Store Alert: New Phishing Apps Bypass Security, Stealing Crypto Wallet Seeds Crypto Phishing Apps, Google Play Store

Crypto Phishing Apps, Google Play Store

Google Play Store Alert: New Phishing Apps Bypass Security, Stealing Crypto Wallet Seeds

Do Son June 16, 2025

Both the Apple App Store and Google Play Store are frequently found to host malicious applications, despite...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-72898CVSS 10.0
Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-20349CVSS 8.6
A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-68820CVSS 7.0
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Aug 11, 2026
CVE-2026-63077CVSS 9.8
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CISA KEV📅 Added to KEV: Aug 5, 2026
CVE-2026-34486CVSS 7.5
Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-9198CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-18556
Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects...
CISA KEV📅 Added to KEV: Aug 4, 2026
CVE-2026-18577
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1
Admin intelCISA KEV📅 Added to KEV: Aug 3, 2026📅 Updated: Aug 3, 2026