Full Disclosure: Coldcard v5.6.0 Post-Hotfix Analysis and 39 Unpatched Findings

On July 31, 2026, Coinkite released Coldcard firmware v5.6.0 as an urgent hotfix for a "limited entropy bug" that produced roughly $90M in user losses. This post presents a technical analysis of what that hotfix actually addresses, what it does not, and additional security findings that users need to know about when deciding how to proceed.

Read More
Threat Intel: Attacker makes off with $1.58 million in Space-X Elon Deepfake Crypto Heist

Attacker makes off with $1.5 million Bitcoin after scamming viewers of edited SpaceX livestream.

Read More
Shellcode Disruption Available Immediately to Disrupt Microsoft 0-day!

Microsoft servers vulnerable to Remote Code Execution CVE-2024-30080 in Microsoft Message Queuing (MSMQ) emphasizing the necessity for effective shellcode disruption during such 0-day attacks.

Read More
Backdoor In Common Linux Utility XZ, Multiple Distros Affected: Everything We Know

On March 29, 2024, a malicious backdoor was discovered to have been inserted into the xz data compression library in a software supply chain attack.

Read More
💬 Ask our AI Assistant Kali