Bypassing the Code: A Compromise of Trust An unidentified threat actor effectively liquidated the entirety of the cryptocurrency protocol AFX Trade without exploiting a single vulnerability within…

Follow us on all social media platforms at @HackRead ;)

The stranger part? It took three weeks of patience to set up a 12-minute crime.

At a glance Field Detail Actor / group BlueNoroff (TA444), a subgroup of North Korea’s Lazarus Group Activity type ClickFix phishing kit faking Zoom and Teams meetings Targets Web3 and crypt…

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.

The respected Bitcoin hardware wallet COLDCARD has disclosed a severe security failure. A build error dating back to March 2021 caused the wallet firmware to generate seed phrases using predictabl…

Recently, we covered the critical security failure in the Canadian hardware wallet COLDCARD. A flawed random-number algorithm generated predictable seeds, and attackers rebuilt the faulty generato…

At a glance Malware family CastleLoader (loader); payloads include CastleStealer, NetSupport RAT, Lobshot, and NeedleStealer Threat actor Not named in this report; the loader is publicly tied to a…

A dedicated VPS can make those demands easier to plan for because specified resources are assigned to one virtual machine. The phrase does not always mean a

Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds already generated on devices.

A routine internet search can culminate in a full macOS compromise – one in which a counterfeit system update prompt manipulates the user into executing a malicious command themselves, and t…

A hardware wallet trusted for years as a fortress of cold Bitcoin storage turned out to harbor a silent betrayal. A concealed firmware defect rendered the randomness generated during key creation …

Hello everyone 👋, In this write-up we’ll tackle Day 8 of the TryHackMe Hackers’ Holiday 2026 event—"Towel on the Sunbed.” We’ll walk…

Adform, a prominent European advertising technology enterprise, recently disclosed a severe security breach. Hackers successfully compromised the company on July 27, 2026. According to rigorous an…

Cloud Capture-the-Flag (CTF) challenges are a great way to learn how small cloud misconfigurations can combine into a full compromise. This…

TL;DR A weak random number generator inside CryptoJS produced predictable wallet seed phrases for over a decade. Attackers confirmed exploitation on-chain as early as May 27, 2026. Users who gener…

Room: CryptoCabana Category: Cloud Difficulty: Medium

MEV stands for Maximal Extractable Value — the profit available to whoever decides the order transactions go into a block. Ordering matters…