A firmware bug silently weakened seed generation on Coldcard hardware wallets, letting an attacker recreate and drain vulnerable wallets at scale. Here's how the entropy failure worked.
Read more: A Hard Lesson in Randomness: Understanding the Coldcard Entropy Incident
A malicious Google Ad leads to a real chatgpt.com link, where a fake "Codex" install command hides a base64 payload that drops the MacSync infostealer. Here's the full chain.
Read more: How a Real ChatGPT Link Delivers Phishing via a Fake Codex Install
Scam-style extortion is rising: attackers post fake data breach claims on leak sites with no real intrusion. Here's how the bluff works and how to verify before you panic.
Read more: Fake Data Breach Claims: Why Scam-Style Extortion Is Surging in 2026
The Vatican's Click to Pray app leaked the personal data of 700,000 users for over six months through a basic IDOR flaw. Here's how sequential user IDs and zero auth checks did the damage.
Read more: Click to Pray Exposes 700k Users: Inside a Textbook IDOR FailureA firmware bug silently weakened seed generation on Coldcard hardware wallets, letting an attacker recreate and drain vulnerable wallets at scale. Here's how the entropy failure worked.
Read more: A Hard Lesson in Randomness: Understanding the Coldcard Entropy Incident
How multi-accounting detection works in iGaming and Gambling, why it matters beyond the financial hit, and how gnoming and chip-dumping schemes actually get caught.
Read more: Multi-Accounting Detection: Stopping Gnoming and Chip-Dumping
Gaming fraud prevention goes beyond iGaming: in-game currency abuse, account trading, and esports match-fixing all need a different detection approach. Here's how they compare.
Read more: Gaming Fraud Prevention: How It Differs From iGaming Across Platforms