GoKawiil
Tech News
Huntress researchers say attackers are chaining two AhsayCBS vulnerabilities—an authentication bypass (CVE-2026-105133) and an OS command injection flaw (CVE-2026-105134)—to compromise at least five organizations since October 7. After breaking in, attackers deployed JSP webshells and installed an XMRig cryptocurrency miner disguised as edge.exe, persisting via a fake Windows service.
Jonathan Spalletta, aged 36, was found guilty of hacking the Uranium Finance decentralized exchange twice in April 2021, stealing over $53 million in cryptocurrency. He exploited smart contract flaws to drain liquidity pools and extorted the platform for a 'bug bounty' before laundering the stolen funds through mixers and exchanges. Authorities recovered luxury collectibles purchased with the stolen assets from his residence in 2025.
Security researchers at Flare identified a ClickFix social-engineering campaign distributing the CrocoRat remote access Trojan and cryptocurrency stealer via a misspelled domain showing a fake house-wiring image. Instead of fetching malware directly, the pasted PowerShell command queries an attacker-controlled DNS TXT record, which returns instructions for the next stage of the attack.
Advancements in fintech and blockchain are focusing on developing crypto payment infrastructure, portable AI tools for fraud prevention, and other emerging technologies. These innovations reflect ongoing efforts to enhance security, usability, and integration within digital finance and blockchain sectors. Despite past volatility, the industry continues to push forward with new solutions and visions for the future.
Advocacy groups representing community banks have filed a lawsuit against the Office of the Comptroller of the Currency, challenging its decision to grant national bank charters to crypto companies. The suit argues that the regulator overstepped its authority in approving these charters for firms operating in the digital asset space.
A new research analysis of $238 billion in World Bank disbursements to 93 countries between 2018 and 2024 found spikes in cryptocurrency activity timed to aid arrivals, concentrated in newly created and anonymous wallets. Researchers estimate this pattern reflects 2 to 6 cents of every aid dollar being diverted, totaling roughly $1.7 to $4.4 billion, with blockchain transaction patterns resembling classic money-laundering stages of placement, layering and integration.
Three masked men broke into a Solihull home, beat the male resident with hammers and threatened his seven-months-pregnant wife, forcing him to transfer cryptocurrency worth hundreds of thousands of pounds. The attackers, guided by an accomplice on a live video call, took his phone and extracted his crypto holdings before fleeing in a getaway car. Crimestoppers is offering £10,000 for information, and police are investigating with help from home security footage.
Ahead of Friday's official iPhone Duo preorder launch, a fraudulent website mimicking Apple's design and offering a fake $500 discount is using the leaked DarkSword exploit chain to attack vulnerable, unpatched iPhones. Malwarebytes researchers say simply visiting the page can trigger an attack that harvests device data, notes, keychain credentials and cryptocurrency wallet files from apps like MetaMask, Phantom and Coinbase Wallet, then exfiltrates them to a remote server.
California has enacted a law prohibiting public officials in the state from creating or promoting their own memecoins. The measure targets the kind of speculative crypto tokens tied to political figures that gained attention after incidents like Donald Trump's memecoin launch.
Trung Nguyen Van, 37, was arrested at LAX on September 24 while attempting to board a flight to Taiwan, days after entering the US through the San Ysidro border crossing. Prosecutors say a victim wired about $16 million in cryptocurrency to Van's wallet between June and August 2024, believing they were investing in a platform called 'Triangle', and that Van moved the funds to an unhosted wallet off the centralized blockchain.
A newly published paper outlines a method to bring Zcash-style shielded transaction privacy to Bitcoin without requiring a network fork. The proposal is presented as a technical design rather than a deployed system, aiming to let Bitcoin users hide transaction details while keeping compatibility with the existing protocol.
The Clarity Act, a bill offering light-touch federal regulation for cryptocurrency assets, failed to advance after scrutiny of profits President Trump and his family made from crypto ventures. Lawmakers cited concerns over these financial ties as a factor undermining support for the legislation.