mastodon 4.7.3Interested in all things digital, even though I often wish for simpler times.
A software flaw in a hardware based crypto wallet, ColdCard, has led to millions in Bitcoin being stolen. The seed words generated for the affected wallets by the vendor was apparently predictable. Yikes!
https://www.coindesk.com/tech/2026/07/31/major-bitcoin-wallet-flaw-drains-594-btc-in-25-minute-sweep
@GossiTheDog@cyberplace.social are you trying to become more “anal retentive”? :)
@GossiTheDog@cyberplace.social I’ve noticed today that many media outlets are mentioning this VulnCheck research where they say NGINX CVE-2026-42945 is being actively exploited because they detected honeypot activity. Thoughts on this Kevin? Here’s an example article…. https://www.helpnetsecurity.com/2026/05/18/ngnix-vulnerability-exploited-cve-2026-42945/
Who remembers how close this came to be in 2024? I don’t remember this really making mainstream media.
Microsoft released CVE-2026-21509 today for an Office Security Feature Bypass Vulnerability. Microsoft has indicated this CVE is being actively exploited and is publicly disclosed.
Update: Patches for Office 2016 and 2019 are apparently now available.
“Office 2021 and later will be automatically protected via a service-side change, but will be required to restart their Office applications for this to take effect.”
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509
@GossiTheDog@cyberplace.social Hi Kevin, can you comment on the stuff going on with Anthropic’s Mythos? Is this all just Ai hype to sell more Ai to orgs? Or a legitimate situation we should all be worried about?
https://venturebeat.com/security/mythos-detection-ceiling-security-teams-new-playbook
@GossiTheDog@cyberplace.social yep, you mentioned this before because I remember giving the game a go based on your comments 🙂
@GossiTheDog@cyberplace.social Godspeed