The 15 biggest crypto exploits of H1 2026 revealed. See how hackers stole nearly $1B using compromised keys and cloud breaches.

The industry is moving toward fixing the private key vulnerability issue, just not evenly, Wish Wu, co-founder and CEO of ...

Summer.fi's post-mortem on the $6.04 million Lazy Summer Protocol exploit concludes that the attack was prepared over several ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

SecondFi is done. The Cardano-linked wallet firm won't resume normal business — it's pivoting entirely to getting stolen ...

Coinspect confirms $3.1M from 431 wallets drained due to Ill Bloom flaw, affecting crypto wallets from mobile apps built weak ...

has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial ...

Wordfence blocked 17M+ attempts to exploit a Gravity SMTP bug that leaks API keys and system data from WordPress sites without authentication. Attackers are actively exploiting a vulnerability in the ...

Owning and using a MacBook is a little different than using a laptop with Windows on it, so it's probably best to not treat ...

A million hole. That's what's left after an attacker found a crack in Supra's on-chain oracle verifier and used it to drain ...

Plus: The Pentagon is training amateurs to become part of its hacker army, a Flock license plate reader error led to cops surrounding a car reviewer, and more.

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...