Today's cybersecurity headlines reveal a critical flaw in hardware wallets leading to significant cryptocurrency theft and important patches for popular web development frameworks. We also see sophisticated attacks targeting advertising platforms and hotel Wi-Fi, highlighting the diverse threat landscape.
Coldcard Hardware Wallet Flaw Leads to $70 Million Bitcoin TheftBreach
A significant sum of approximately $70.2 million in Bitcoin was stolen in just 41 minutes due to a firmware vulnerability in Coldcard hardware wallets. The flaw, present since a 2021 update, caused seed generation to rely on a predictable software pseudorandom number generator, compromising the security of generated addresses.
Why it matters: If your business uses cryptocurrency and relies on hardware wallets for storage, ensure all firmware is updated and verify the integrity of your seed phrase generation process.
Read more at The Hacker News ↗
Adform Script Hijacked to Swap Crypto Wallet AddressesThreat
Attackers injected malicious JavaScript into Adform's advertising technology, creating a browser-side tool that could automatically replace cryptocurrency wallet addresses copied by users. This supply chain attack enabled the theft of funds by redirecting transactions to attacker-controlled wallets.
Why it matters: Regularly audit all third-party scripts and advertising tags used on your website, as they can be a vector for supply chain attacks that impact your users.
Read more at The Hacker News ↗
Adobe Campaign Classic Suffers Critical RCE FlawVulnerability
Adobe has released urgent security updates for its enterprise marketing platform, Campaign Classic, to address a critical vulnerability (CVE-2026-48449) with a CVSS score of 10.0. This authorization flaw could allow an attacker to execute arbitrary code without user interaction.
Why it matters: If your business uses Adobe Campaign Classic, prioritize applying this update immediately to prevent unauthorized code execution and potential system compromise.
Read more at The Hacker News ↗
Ruby on Rails Active Storage Vulnerability PatchedVulnerability
A critical vulnerability has been patched in the Active Storage framework of Ruby on Rails. This flaw could allow unauthenticated attackers to read arbitrary files from an application and potentially lead to remote code execution (RCE).
Why it matters: If your website or application is built on Ruby on Rails, promptly apply the latest patches to safeguard against arbitrary file access and potential server compromise.
Read more at BleepingComputer ↗
Hijacked Hotel Wi-Fi Delivers Surveillance MalwareThreat
Cybercriminals are exploiting compromised hotel Wi-Fi networks to push fake browser updates that install 'CornFlake' surveillance malware. This Remote Access Trojan (RAT) is capable of capturing webcam images, microphone audio, and keystrokes from unsuspecting victims.
Why it matters: When traveling, avoid using public Wi-Fi for sensitive activities; instead, use a VPN or mobile hotspot to protect your business data and privacy from Wi-Fi-based attacks.
Read more at The Hacker News ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.