The 15 biggest crypto exploits of H1 2026 revealed. See how hackers stole nearly $1B using compromised keys and cloud breaches.

SecondFi is done. The Cardano-linked wallet firm won't resume normal business — it's pivoting entirely to getting stolen ...

has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Machine identities now outnumber human users across most enterprises, yet many remain unmanaged, overprivileged, and ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Ctrl Wallet will shut down on August 3, urging users to move assets or export recovery phrases while warning against scams.

Summer Finance—a yield aggregation and automated vault management platform formerly known as Oasis.app—has fallen victim to an exploit that drained roughly $6 ...

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

Thanks to AI, a lone threat actor was able to execute a cyber-attack that would have otherwise taken weeks in just 72 hours, ...

The protocol completed a multi-stage recovery that included an independent security review. The TAIKO token has surged as ...

What if the same Bitcoin signature could authorize spending from multiple different UTXOs? BIP 118's ANYPREVOUT does exactly ...