Security news
-
India's largest exchange denies hack after sleuths pointed to $16 million in suspicious outflows
CoinDCX denies its active wallets were hacked after sleuths flagged $16 million in outflows from addresses linked to the India-based exchange.
-
CoinDCX Acknowledges Wallet-Sweeping Losses After Denying New Breach
The exchange says affected deposits were credited, but has not disclosed the size of its losses.... Read the full story at The Defiant
-
Bitcoin Core changes security policy as AI makes bugs easier to find
Bitcoin Core says keeping certain vulnerabilities secret no longer offers much protection in the wake of AI-assisted bug hunting.
-
PHP Unveils Critical “Internet-Wide” Vulnerabilities: How Can Web3 Patch Its “Off-Chain Weaknesses”?
What Happened On October 21, the PHP project released emergency security updates to fix two critical vulnerabilities, CVE-2026–109618 and CVE-2026–109619, which could lead to unauthenticated remote code execution (RCE). Both were rated 9.2 under CVSS v4.0. The PHP team explicitly stated that before...
-
UAE-Led Scam Crackdown Identifies Over $39 Billion in Funds and Crypto
Operation Confrontation Ghost reported more than 960 arrests and raids on 29 fraud centers; participating countries are working toward asset recovery.... Read the full story at The Defiant
-
Is the Internet Safe Again After the PHP Nightmare? What You Need to Know
PHP shipped its fix, attackers launched millions of attempts, and governments say no one has broken in yet. Here's what that means for your passwords, your crypto, and your browsing.
-
Lightning Labs Urges Immediate Updates Over Certificate Vulnerability
New binaries block trust in compromised eMudhra certificate keys. Updating Go on a host alone does not patch software already installed.... Read the full story at The Defiant
-
Norwegians are losing their gold after being persuaded to leave it in the woods
Norwegians are falling victim to a scam in which they're induced to purchase gold and then leave it in forests or public parks. The scam, according to Finans Norge, involves the scammers persuading their victims to purchase gold that they promise to keep safe on their behalf. According to an ABC...
-
Crypto exchange CoinDCX ‘lying’ about $16M hack, say blockchain investigators
On Thursday morning, blockchain investigator “Darcy” flagged suspicious movements totalling $16 million on addresses suspected to be associated with crypto exchange CoinDCX. Shortly afterwards, CoinDCX co-founder Sumit Gupta thanked the researcher, who works for security firm Salus, but insisted...
-
Researchers Flag Swell Rate Manipulation After Railway Key-Drain Warning
Researchers flagged inflated swETH and rswETH rates after the cloud-platform disclosure; the reported 2,513 ETH held by Swell is not a confirmed loss.... Read the full story at The Defiant
-
North Korean sites go dark while PHP flaw sparks global panic
North Korean government and state media websites have been offline for 24 hours following the disclosure of a major PHP vulnerability that left 70% of the world’s websites open to hackers. PHP, the scripting language powering these websites, was discovered to have a major bug that could allow...
-
Arkham CEO on $1 Billion of U.S. Government Bitcoin Moved to “Unknown” Wallet
📺 Watch Video Bitcoin Magazine Arkham CEO on $1 Billion of U.S. Government Bitcoin Moved to “Unknown” Wallet A US government-linked wallet just moved about $1 billion in Bitcoin from the Bitfinex hack, and the market wants to know if a sale is coming. Arkham Intelligence CEO Miguel Morel explains...
-
SpaceX-Tesla Merger: Passive Flows ‘Hack’, Could Bring More BTC Exposure to S&P 500
📺 Watch Video Bitcoin Magazine SpaceX-Tesla Merger: Passive Flows ‘Hack’, Could Bring More BTC Exposure to S&P 500 Tesla and SpaceX have formed a special committee to explore a merger that would create the largest equity in the world by market cap. In this clip, Sean Hagan breaks down why the deal...
-
CoinDCX pledges no user losses after $16M transfers draw scrutiny
CoinDCX tied the transfers to wallets compromised in July 2025, but investigators said the addresses remained linked to its operations.
-
PHP flaw draws millions of exploit attempts, Cloudflare CEO warns
Cloudflare’s Matthew Prince said the network saw thousands of exploit attempts even before the PHP vulnerability was publicly disclosed.
-
CoinDCX Co-Founder Denies New Hack After $16 Million Wallet Alert
Sumit Gupta says the flagged addresses were compromised in July 2025 and that no funds from CoinDCX’s current wallets were affected.... Read the full story at The Defiant
-
Move over memecoins: Crypto ‘meme games’ coming, bagholders and all
“Plenty will be ponzis. Plenty will get exploited. Plenty will insta die. There will be ridiculous gains, and people will get absolutely f***ing rinsed,” says Illuvium co-founder Kieran Warwick.
-
Cloudflare CEO Reports Millions of PHP2Shell Exploit Attempts
PHP has shipped fixes for four supported branches. The flaws can let attackers run code on vulnerable web servers without logging in.... Read the full story at The Defiant
-
PHP Foundation admits ‘structural failure’ delayed critical security fix
Government websites and online services were disrupted after concerns about a PHP bug that could allow attackers to take control of vulnerable servers.
-
eMudhra's Weak Certificate Keys Prompt Emergency Trust Updates
One recovered private key was just 4. The company says the flaw went undetected through two independent audit cycles.... Read the full story at The Defiant
-
Trump Touts Crypto Scam Crackdown as DOJ Reports $938 Million Restrained
Attorney General Todd Blanche described a nationwide scam prosecution initiative deploying dozens of prosecutors across all 94 US Attorneys’ Offices.... Read the full story at The Defiant
-
Trump didn‘t mention ‘crypto’ once in White House cybercrime roundtable
The US President detailed many schemes defrauding Americans, but referred only to “cybercurrency“ related to scams.
-
NSA Urges PHP Users to Patch or Take Systems Offline
PHP has released fixes for two flaws rated 9.2 that can let unauthenticated attackers run code on web servers.... Read the full story at The Defiant
-
Eclair Patches Lightning Bugs That Could Let Peers Steal Funds
The second security release in five days lets node operators upgrade without closing channels, though Eclair must be stopped and restarted.... Read the full story at The Defiant
-
Rent a car, launder crypto: Italian police bust $76M mafia scheme
Italian police have busted a mafia-linked crypto laundering ring that moved €68 million ($76 million) out of the country under the guise of a Milan-based car rental company. According to Il Sole 24 Ore , the operation, carried out by the Guardia di Finanza and Monza Brianza, has seen 30 individuals...
-
Trump to throw spotlight on overseas crypto abuses at White House event
The president is hosting a cybercrime event that will highlight U.S. authorities' efforts to crack down on crypto scams run by foreign criminal organizations.
-
Japan's Prime Minister Urges PHP Patching, Suggests Temporary Site Shutdowns
Fixes are now available for two critical flaws that can let attackers run code on web servers without logging in.... Read the full story at The Defiant
-
President Trump to Highlight Crackdown on Overseas Crypto Scams
Bitcoin Magazine President Trump to Highlight Crackdown on Overseas Crypto Scams President Donald Trump will use a White House event on Wednesday to spotlight his administration's push against foreign criminal networks that lure Americans into fake crypto investments, a White House official told...
-
Drift exploiter sends $109M in Ether to Tornado Cash in 2 days
Wallets linked to the $295 million April hack still held $138 million in Ether after sending another $46 million to the mixer Wednesday.
-
Bürgel Says PHP Exploits Are Circulating Ahead of Critical Patches
PHP’s fixes are scheduled for 10 a.m. ET; security advisories urge operators to restrict exposed services and prepare to patch immediately.... Read the full story at The Defiant