🕵️ RESEARCH & DEEP DIVES
-
Researcher Finds North Korean Hackers Breached 1,640 Networks Worldwide A researcher found North Korean hackers had footholds in 1,640 networks worldwide.
- Organizations worldwide were affected by the intrusions.
- North Korean hackers gained footholds in 1,640 networks.
- About half of the intrusions were serious breaches.
- Researcher Vangelis Stykas monitored the hackers' infrastructure for nearly two years. 📎 Coverage: wired.com · 👁 via @agreenberg@infosec.exchange
-
Ill Bloom links active wallet drains to a 12-year-old CryptoJS entropy flaw Coinspect found attackers exploiting weak CryptoJS randomness to drain crypto wallets.
- Users of multiple crypto wallet applications and networks were affected.
- Wallet recovery phrases generated with weak CryptoJS randomness were vulnerable to prediction.
- Attackers exploited predictable seeds to identify and drain accounts with on-chain activity.
- The flaw existed for 12 years, was fixed in CryptoJS six years ago, and affected downstream wallet code. 📄 Source: illbloom.org · 📎 Coverage: coinspect.com · 👁 via r/netsec
🔓 CVEs & KEV
- CVE-2026-67531 — CVSS 9.3 — FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by...
- CVE-2026-19027 — CVSS 6.9 — HDF5 out-of-bounds heap read in N-Bit filter decompressionThe H5Z__nbit_decom...
- CVE-2026-19028 — CVSS 6.8 — HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds re...
- CVE-2026-19026 — CVSS 6.8 — Nbit filter NULL/short parameter-array dereferenceH5Z__filter_nbit in H5Znbit...
- CVE-2026-19025 — CVSS 6.8 — HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and d...