Security Alerts & Patches

8+ hour, 51+ min ago   (187+ words) It almost worked. But the transaction never made it to the finish line the attacker had in mind. This is the double-edged nature of maximal extractable value activity on Ethereum: the same visibility that lets bad actors plan an attack…...

15+ hour, 13+ min ago   (618+ words) This is not a routine update cycle. It’s a data point in a trend that has been building for two years: patch volumes climbing, wormable network flaws multiplying, and zero-day exploitation increasingly happening before vendors even know the bug exists....

21+ hour, 57+ min ago   (463+ words) The exploit centered on SingularityNET’s own contracts rather than Fetch.ai’s infrastructure, with the attack specifically routed through the bridge connecting Ethereum and Cardano. Fetch.ai’s public statement, posted shortly after reports of the breach emerged, laid out where the…...

5+ day, 22+ hour ago   (653+ words) Google’s own exposure matrix, buried in the bulletin text, is the single most useful piece of information for a security team trying to triage this fast. It splits GKE deployments into four buckets, and only one of them needs urgent…...

6+ day, 4+ hour ago   (786+ words) That compressed timeline, and the jump from opportunistic scanning to ransomware deployment, is why security teams outside government are paying attention today. vCenter sits at the center of most enterprise virtualization stacks, meaning a single unpatched instance can hand an…...

6+ day, 10+ hour ago   (882+ words) What makes the Cadence breach notable isn’t the vulnerability itself, it’s the gap between advice and practice. JetBrains told the world to patch on July 27. Its own Cadence-linked TeamCity server was still exploitable on August 8, nearly two weeks after the…...

1+ week, 1+ day ago   (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...

1+ week, 6+ day ago   (359+ words) Microsoft’s September 2026 Patch Tuesday fixes 974 CVEs, including 723 Windows flaws and two marked as exploited. Microsoft’s September 2026 Patch Tuesday release fixes 974 Microsoft CVEs, including 723 vulnerabilities across Windows. Microsoft’s release notes list two Windows flaws as having exploitation detected, giving users and…...

1+ week, 6+ day ago   (603+ words) The exploit is small by 2026 standards, but the mechanism behind it is arguably more instructive than the year’s bigger headlines. It’s a reminder that DeFi’s biggest risks aren’t always new: sometimes they’re old code nobody swept up after a migration,…...

2+ week, 19+ hour ago   (595+ words) That silence is the part rattling the Magento ecosystem the most. E-commerce sites operate on razor-thin trust margins around checkout, and every hour without an official response is another hour store owners have to decide, largely blind, whether to take…...