5+ day, 23+ hour ago   (714+ words) PaperCut’s Authentication Gap Returns: Two-Minute RCE Chain Hits 70,000 Organizations CryptoRank PaperCut’s Authentication Gap Returns: Two-Minute RCE Chain Hits 70,000 Organizations A pre-authentication RCE chain in PaperCut (CVE-2026-81578 and CVE-2026-82078) exploits Apache Tapestry to bypass auth and load a malicious JDBC driver for…...

1+ week, 1+ day ago   (132+ words) Balancer has given the operator of a wallet linked to its Aug. 31 exploit until Sept. 8 to return the stolen funds or face further action. If the attacker does not cooperate, Balancer said it will escalate its response, potentially using technical,…...

1+ week, 4+ day ago   (584+ words) 21,000 Exchange Servers Exposed to Public PoC Exploit After Pwn2Own $200K Chain Demo CryptoRank 21,000 Exchange Servers Exposed to Public PoC Exploit After Pwn2Own $200K Chain Demo CVE-2026-62911 is an Exchange authentication-bypass (CVSS 8.0/8.1) that enables NTLM relay to an HTTP.sys endpoint and a demonstrated three-bug…...

1+ week, 5+ day ago   (694+ words) Smart Home Security Debt: When Your Router Becomes the Agent’s Attack Surface CryptoRank Smart Home Security Debt: When Your Router Becomes the Agent’s Attack Surface August 2026 disclosures reveal systemic smart‑home infrastructure failures: VulnCheck’s early‑August Zbtlink ENDLESSDOORS found factory…...

3+ week, 1+ day ago   (495+ words) Metaverse project The Sandbox is facing a critical security breach after its SAND cross-chain OFT contract on the Base network was reportedly exploited, allowing an attacker to carry out an “infinite mint” attack. Onchain data shows the attack is still…...

3+ week, 1+ day ago   (599+ words) A hacker linked to a recent cryptocurrency theft has purchased another 3,386 ETH worth approximately $7.95 million, according to on-chain analyst EmberCN. The transaction occurred about six hours ago, bringing the hacker’s total accumulation over the past 24 hours to 21,659 ETH, valued at…...

3+ week, 3+ day ago   (690+ words) Maya Protocol halted MAYAChain on Aug. 18 after an attacker exploited six linked software flaws. The crypto hack news event caused about $1.7 million in attacker-controlled losses. Maya co-founder Aalux said the team contained further damage and began recovery work. The incident…...

4+ week, 1+ day ago   (136+ words) A cyberattack on France’s tax authority exposed personal data linked to about 678,000 taxpayers, including information on thousands of high-income individuals. France’s Finance Ministry confirmed the breach after hackers accessed systems at the General Directorate of Public Finances. FrenchBreaches estimates that…...