In today’s Bitcoin news, BTCPay Server, the free open-source payment processor many Bitcoin merchants run themselves, told ...

BTCPay Server warns of swept Bitcoin hot wallets on older installs and tells operators to shut down. What happened, who is ...

Was Honda hacked? The confirmed incidents (2011, 2020, 2023), a 2026 claim we could not verify, and the steps to take if you ...

BTCPay Server attackers swept hot wallets on older versions days after the Binance hack, but merchants have no insurance fund ...

Mercado Bitcoin paused deposits and withdrawals as Hypernative flagged $40M+ moving across 10 chains. What is confirmed, what ...

Are warnings of a global cyber war based on genuine evidence, or are governments, security agencies and media organisations exaggerating the danger? The available evidence points to a clear conclusion ...

See also: server-side-advanced.md for Part 1 (ExifTool, Go rune/byte mismatch, zip symlink traversal, path traversal bypasses, Flask/Werkzeug debug, XXE external DTD, WeasyPrint SSRF, MongoDB regex ...

For injection attacks (SQLi, SSTI, SSRF, XXE, command injection, PHP type juggling, PHP file inclusion), see server-side.md. For deserialization attacks (Java, Pickle) and race conditions, see ...

BTCPay founder Nicolas Dorier said the attacker logged in as admin on instances that appear to be running versions before 2.4 ...

CL-UNK-1211 targets government Linux servers using AI-assisted scripts, PHP web shells, and SysGoRAT to steal credentials and ...

This week's ThreatsDay Bulletin covers the $6.43B crypto heist, Volt Typhoon, ChatGPT flaws, AI extension backdoors, spyware, critical CVEs, and more.