Vulnerabilities & Patching

18+ hour, 18+ min ago   (640+ words) Coldcard has another security headache on its hands, and this one arrived through its own social media account. Early Sunday, Oct. 11, a fraudulent post appeared on the hardware wallet manufacturer’s official X account, warning customers about a supposed seed-generation vulnerability…...

20+ hour, 36+ min ago   (90+ words) ForkLog Phishing Link Found in Coldcard’s X Account Coldcard reported a phishing link in its X account. Coldcard, a manufacturer of hardware Bitcoin wallets, reported the presence of a phishing link in its official X account. The fake security alert…...

19+ hour, 45+ min ago   (418+ words) Published 11 Oct 2026, 12:26 UTC This article is an automated aggregation of coverage from news outlets. Our editorials offer in-depth analysis curated by the NewsCord team. Phishing link appeared on Coldcard's official X account and was deleted. Company used offline 2FA; no unauthorized…...

22+ hour, 36+ min ago   (324+ words) COLDCARD said on October 11 that its official X account had published a phishing message, directing users toward a fake wallet-migration site. The company said it found no corresponding login, session or access record, said its credentials and offline two-factor authentication…...

1+ day, 14+ hour ago   (162+ words) | Posted October 10, 2026 at 2:00 pm ET. Quick favor: We’re deciding what Unchained does next; new shows, stream times, what’s worth paying for. Our listener survey takes five minutes, it’s anonymous, and I read the write-in answers myself. Everyone who takes it…...

5+ day, 17+ hour ago   (537+ words) Microsoft has released an out-of-band security update addressing CVE-2026-96940, a high-severity vulnerability in Microsoft Exchange Server that could allow authenticated attackers to access other users’ mailboxes and read sensitive emails and attachments. The flaw carries a CVSS score of 8.8 and…...

3+ day, 21+ hour ago   (359+ words) wolfSSL has released wolfSSH 1.6.0 to fix five security flaws, including a critical host key verification bypass that could let an attacker impersonate an SSH server. Published on October 6, 2026, the update addresses Windows privilege escalation, unauthenticated key exchange abuse, unauthorized forwarding…...

5+ day, 2+ hour ago   (139+ words) Fortinet released fixes for an exploited FortiMail flaw; administrators should upgrade affected branches and check appliances for signs of compromise. The weakness was already being exploited when Fortinet disclosed it. The Canadian Centre says Fortinet reported exploitation in the wild,…...

6+ day, 15+ hour ago   (672+ words) Online privacy is becoming increasingly important, especially for Linux users who want more control over how their internet traffic is handled. Parrot OS has long included tools aimed at security researchers and privacy-conscious users, and one of its best-known privacy…...

6+ day, 21+ hour ago   (248+ words) Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but “does not allow access across…...