NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Coldcard Maker Destroys Vulnerable Inventory After $88M Bitcoin Theft
Coinkite has scrapped remaining stock of its Coldcard hardware wallets after attackers exploited a years-old firmware flaw to drain more than $88…
Anthropic Says Recent Claude Breaches Stemmed From Over-Permissioning, Not Model Flaws
Anthropic attributes last month's real-world security incidents involving its Claude models to excessive system permissions, particularly unrestricted internet access, rather than weaknesses…
N-able N-central Flaw Let Attackers Seize Servers After Patch Failed
An authentication bypass in N-able's N-central remote monitoring platform allowed attackers to gain full administrative control and pivot into customer environments, and…
Microsoft Ties Midnight Blizzard to Captive Portal Wi-Fi Credential Theft Campaign
Microsoft attributes the CaptiveCrunch campaign, which hijacked hotel and conference Wi-Fi captive portals to steal Microsoft 365 credentials, to Storm-2945, a subgroup…
Chrome Set to Block Policy-Abused New Tab Hijacker Extensions
Google is developing a Chromium feature that stops malware from abusing enterprise policy mechanisms to force-install extensions that hijack the New Tab…
COLDCARD RNG Bug Tied to $88.6M Bitcoin Wallet Heist
A flawed random number generator in COLDCARD hardware wallet firmware let attackers predict private keys offline, enabling a wave of automated thefts…
Adform Ad Script Hijacked to Swap Crypto Wallet Addresses on Copy
A supply-chain compromise of Adform's widely embedded tracking script let attackers silently replace Bitcoin, Ethereum, and TRON addresses copied by site visitors,…
Rails Patches Critical Active Storage Flaw That Enables Remote Code Execution
A critical arbitrary file read vulnerability in Rails' Active Storage component can expose secrets and escalate to RCE, with public proof-of-concept exploits…
Amgen Discloses Cloud Breach Exposing Patient Health Data and Proprietary Information
The biotech giant says threat actors exfiltrated corporate and patient data from multiple third-party cloud environments, prompting an SEC filing and an…
Balance Theory Lands $19M to Streamline Cybersecurity Spending Decisions
The Maryland startup's platform, which already oversees more than $1 billion in security investments, will use the Series A round to expand…
Hijacked Hotel Wi-Fi Delivers CornFlake Spyware via Fake Browser Updates
Microsoft says a Storm-2945 campaign dubbed CaptiveCrunch is hijacking hotel Wi-Fi captive portals to push fake browser updates that install the CornFlake…
Adform Ad Script Hijacked to Swap Crypto Wallet Addresses on Copy
Attackers tampered with a JavaScript file served by ad-tech firm Adform, turning it into a browser-based tool that silently rewrote copied cryptocurrency…