NewsBleepingComputer
BTCPay Server warns of hot wallet crypto thefts on outdated instances
Teaser from the source
The maintainer of BTCPay Server, an open-source cryptocurrency payment processor, has urged users to install the latest version as hackers have been draining "hot wallets" on instances running older versions. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on instances
Other advisories
- Not ratedosv:CVE-2026-99238tracing: Hold trace_types_lock when updating modules in persistent instances
- Criticalpwn_watch:btcpay-server-hot-wallet-drains-2-4-1-and-earlier-nov-2026BTCPay Server: hot wallets drained on self-hosted instances running 2.4.1 and earlier
- Not ratedosv:CLEANSTART-2025-OB93033In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules
- Not ratedosv:CLEANSTART-2026-VI37845Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver does not verify if the class implements...
- Not ratedCVE-2026-111770MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
- HighCVE-2026-111770MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
- Highghsa:GHSA-2g87-pp6c-29x5aiohttp: Multiple instances of excessive or unbounded memory/CPU use
- Not ratedosv:GHSA-2g87-pp6c-29x5aiohttp: Multiple instances of excessive or unbounded memory/CPU use
Other news entries
- Hackers Exploit BTCPay Server Flaw to Steal Bitcoin and Litecoin From Hot WalletsNewsThe Hacker News
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WANNewsCisco Talos
- GitLab warns of max severity code execution vulnerabilityNewsBleepingComputer
- Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler GatewayNewsCSO Online
- GitLab warns of critical RCE vulnerability in AI Gateway serviceNewsBleepingComputer
- OpenAI admits six new misalignment incidents under new reporting frameworkNewsCSO Online
- OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized UploadsNewsThe Hacker News
ID