💥 BREACHES & INCIDENTS
- Crypto casino Duelbits confirms ~$7M hot-wallet hack, takes platform offline
Crypto casino Duelbits confirmed a hack that drained roughly $7 million from its hot wallets, forcing the platform offline.- Affects Duelbits customers; the crypto casino's hot wallets on Ethereum, BNB Chain, Tron, and Bitcoin were drained of approximately $7 million total.
- Initial outflows of ~$4.2 million were reported by Scam Sniffer; later 8.1 BTC left the Bitcoin hot wallet, raising losses to ~$7 million.
- Stolen assets included 836 ETH, ~593,000 USDT, 97,000 USDC, 31,500 DAI, 12.4 billion SHIB, 209 BNB, and 192,000 TRX, mostly converted into Ether and consolidated into one address holding ~2,234 ETH (~$6 million).
- Scam Sniffer assessed the activity as a suspected private-key compromise, though Duelbits has not confirmed a root cause; the company says user funds are safe and plans to relaunch as 'Duelbits 2.0'.
Sources 📄 Source: x.com · 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News, cryptika.com (discovered)
🕵️ RESEARCH & DEEP DIVES
- Russia's Hybrid Cyber-Physical War in Europe Heats Up, Recorded Future Warns
Recorded Future reports Russia is escalating hybrid cyber, disinformation, and physical sabotage operations against European nations supporting Ukraine.- Targets include European nations providing material support to Ukraine; logistics, dual-use, and critical infrastructure firms are at high risk.
- Tactics include cyber sabotage, disinformation via impersonated media outlets (e.g., CopyCop AI-generated content in France and Norway), and drone incursions near Estonia, Romania, and a German airport.
- Recent incidents include water and wastewater attacks in Norway and Poland, attacks on Poland's energy infrastructure, and a drone near Romania's Neptun Deep offshore gas project.
- Russian cyber operations typically gain access through Internet-facing firewalls, VPNs, email services, and web portals.
- Recorded Future assesses Putin is likely to escalate aggression over the next two years, potentially coalescing tactics into a full-scale 'New Generation Warfare' campaign.
📋 ADVISORIES
- Cloudflare Fixes Containers Flaw That Exposed Other Customers' Leftover Disk Data
A flaw in Cloudflare Containers let a paying customer read leftover disk data from other customers' containers.- Affects Cloudflare Containers and Cloudflare Sandboxes, which run customer code including untrusted AI-agent code on shared servers
- Thin-provisioned disks allocated storage in 64-kilobyte blocks that were returned to a shared pool without wiping on container deletion
- Researchers wrote 4 KB into a reused block and read back 60 KB of a previous container's data; leftover data found on 18 of 24 production tries across four continents
- Recovered material included directory listings, SQLite databases, Chromium profiles, .env files, and credential files
- Reported September 4 by Oren Yomtov of Accomplish via bug bounty; Cloudflare re-enabled wiping and retired all running container disks by September 19, finding no evidence of abuse by others
📋 ADVISORIES
- 📄 Source for CISA adds actively exploited WSO2 and Adobe Commerce/Magento flaws to KEV catalog — cisa.gov
🔓 CVEs & KEV
CVE-2026-14281 — 101gen Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code — CVSS 9.8 — Automation Web Platform through 4.8.6 - Unauthenticated Privilege Escalation via '...
CVE-2026-93207 — Linux — CVSS 9.8 — Linux Kernel SUNRPC GSS Credential Handling Flaw Exposes Systems to Memory Corruption
CVE-2026-97413 — Linux — CVSS 9.8 — In the Linux kernel, the following vulnerability has been...
CVE-2026-93228 — Linux — CVSS 9.1 — Linux Kernel svcrdma Vulnerability: Malformed RDMA Chunks Lead to Critical System Instability
CVE-2026-79766 — Termix-SSH Termix — CVSS 9.1 — Termix Authenticated RCE: Shell Metacharacter Injection Exposes Backend
CVE-2026-97846 — Red Hat Build of Keycloak — CVSS 6.8 — Keycloak-services: keycloak-services: standard token exchange v2 bypasses mtl...
CVE-2026-93899 — wordplus Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots — CVSS 6.5 — Better Messages through 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'gro...
CVE-2026-94376 — wordplus Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots — CVSS 6.4 — Better Messages through 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross...