Thermo Fisher: Making DNA files harder to manipulate
Thermo Fisher patches a vulnerability in selected Applied Biosystems human identification software. With updates using digital signatures, manipulating DNA files becomes easier to detect.
Category: Software Supply Chain Security
N-central takeover: fix not enough
Attackers exploited an authentication bypass to take over N-central servers and reach managed endpoints. N-able’s initial fix didn’t fully close the gap, so every customer must upgrade to 2026.3.1.7.
FaceHugger flaws: Diffusers code execution risk
Researchers disclosed FaceHugger flaws that can enable arbitrary code execution when Diffusers loads crafted model repositories. Fixes landed in Diffusers 0.38.0.
Coldcard hardware wallet flaw: $70M Bitcoin theft
A Coldcard hardware wallet flaw was linked to the rapid theft of about $70M in Bitcoin. Research explains how a weak seed-generation path could let attackers guess seeds offline.
Balance Theory’s $19M for Better Cybersecurity Spending
Balance Theory secured $19 million in Series A funding to expand its platform for cybersecurity spending management. The system connects investment planning with market intelligence and automated execution.
Rails Critical Vulnerability: RCE Risk Patched
A new Rails critical vulnerability (CVE-2026-66066) was patched after reports that unauthenticated attackers could read arbitrary server files. In some setups, that exposure could lead to remote code execution.
HollowFrame and Matryoshka: Spear-Phishing Toolkit
Researchers describe how HollowFrame Matryoshka operates as a multi-stage spear-phishing intrusion. It chains DLL side-loading, privilege escalation, and Rust-based backdoors for remote command execution and deeper domain activity.