AccessDenied403

OpenClaw Bug Enables One-Click Remote Code Execution via Malicious Link A high-severity OpenClaw flaw allows one-click remote code execution via token theft and WebSocket hijacking; patched in v2026.1.29.

"The problem is that clicking on the link to that web page is enough to trigger a cross-site WebSocket hijacking attack because OpenClaw's server doesn't validate the WebSocket origin header."
thehackernews.com/2026/02/open...

Prompt injection and RCE in Qodo Merge, an open-source AI code review tool. Great write-up!
kudelskisecurity.com/research/qod...

"The attack involved infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic destined for notepad-plus-plus.org. The incident began from June 2025 until December"
Recommend version: v8.9.1
notepad-plus-plus.org/news/hijacke...

Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain Developers North Korean group Konni uses AI-assisted PowerShell malware and phishing via Google ads and Discord to breach blockchain development environments.

"The North Korean threat actor known as Konni has been observed using PowerShell malware generated using artificial intelligence (AI) tools to target developers and engineering teams in the blockchain sector."
thehackernews.com/2026/01/konn...

Gemini AI assistant tricked into leaking Google Calendar data Using only natural language instructions, researchers were able to bypass Google Gemini's defenses against malicious prompt injection and create misleading events to leak private Calendar data.

Using only natural language instructions, researchers were able to bypass Google Gemini's defenses against malicious prompt injection and create misleading events to leak private Calendar data.

ERC-1643: Document Management Standard (ERC-1400) This ERC allows documents to be associated with a smart contract and a standard interface for querying / modifying these contracts, as well as receiving updates (via events) to changes on these docume...

ERC-1643, part of ERC-1400, is one of the oldest tokenization related standard on Ethereum (2018) developed by PolymathNetwork.
It allows to manage on-chain document which is very useful for tokenization and RWA. More information on the Ethereum magician forum: ethereum-magicians.org/t/erc-1643-d...

GitHub - CMTA/CMTAT: Reference Solidity implementation of the CMTAT security token framework developed by CMTA to tokenize financial instruments. Reference Solidity implementation of the CMTAT security token framework developed by CMTA to tokenize financial instruments. - CMTA/CMTAT

The latest release of CMTAT Solidity (v3.1.0), a security token framework for on-chain RWA, includes now Chainlink CCIP support for seamless cross-chain transfers. Available on GitHub

GitHub - CMTA/CMTAT-Solana: Solana version of CMTAT Solana version of CMTAT. Contribute to CMTA/CMTAT-Solana development by creating an account on GitHub.

How do you tokenize RWAs on Solana?
CMTA just released a new specification leveraging the Token Extensions Program (Token-2022).
Now available on GitHub: github.com/CMTA/CMTAT-S...
Glad to have contributed through my work at Taurus

Shai Hulud Strikes Again (v2) - Socket Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Tracking the latest NPM supply-chain attack (“Shai Hulud”):
• Socket: socket.dev/blog/shai-hu...
• Aikido: www.aikido.dev/blog/shai-hu...

Quarkslab engineers Robin David, Mihail Kirov and Kaname just completed the first public security audit of Bitcoin Core, led by
@ostifofficial.bsky.social and funded by Brink.dev

Details on the blog post:
blog.quarkslab.com/bitcoin-core...
Congrats to developers for such software masterpiece !

YouTube video by Cryptography 101 Lecture 1. Introduction (Hash-Based Signatures)

Great YouTube playlist to learn more about Hash-Based quantum-safe signature schemes (LMS, XMSS and
SPHINCS+). www.youtube.com/watch?v=pt5W...
#cryptography

Bluesky seems to work, unlike X/Twitter x)

YouTube video by Base Coinbase Security Series: Open Source MPC Key Management

Coinbase Security series: what is MPC and how to use it for Key Management: youtu.be/qdhM3syDkxM
#cryptography

Breaking server SGX via DRAM bus: wiretap.fail

See also www.aikido.dev/blog/npm-deb... and www.securityalliance.org/news/2025-09...

"The malware did more than just steal SSH keys, npm tokens, and .gitconfig files - it weaponized AI CLI tools (including Claude, Gemini) to aid in reconnaissance and data" www.stepsecurity.io/blog/supply-...

YouTube video by [EthCC] Livestream 6 Stav Beno (starkware) - From Design to Benchmarking: BLAKE Hash AIR for the Stwo Prover

Algebraic intermediate Representation (AIR) for Blake Hash youtu.be/INtBA-9vJpU?... hackmd.io/@starkware-h...

Yehuda Lindell (Coinbase)_Coinbase's cb-mpc Open-Source Library YouTube video by [EthCC] Livestream 4

Coinbase MPC wallet library presentation at EthCC m.youtube.com/live/ppeyz_J...

Taurus Blog - Conditional Transfers with CMTAT & Taurus-CAPITAL: A Step-by-Step Guide Conditional Transfers with CMTAT & Taurus-CAPITAL: A Step-by-Step Guide

My last article about ERC-20 ConditionalTransfer is available on Taurus blog: www.taurushq.com/blog/tokeniz...
Based on CMTAT, an open-source project: github.com/CMTA/CMTAT
#solidity

Coinbase fixes 2FA log error making people think they were hacked Coinbase has fixed a confusing bug in its account activity logs that caused users to think their credentials were compromised.

Coinbase has fixed a confusing bug in its account activity logs that caused users to think their credentials were compromised.

MITRE warns that funding for critical CVE program expires today MITRE Vice President Yosry Barsoum has warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs expires today, which could lead to widespread disruption across the global cybersecurity industry.

MITRE Vice President Yosry Barsoum has warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs expires today, which could lead to widespread disruption across the global cybersecurity industry.

Ethereum NFT Standards: ERC-721, ERC-1155, ERC-6551, and More Non-Fungible Tokens (NFTs) enable unique, verifiable ownership of digital and real-world items on the blockchain. While ERC-721 remains the main standard to represent NFTs on Ethereum and EVM blockcha...

NFTs are used to represent unique items on the blockchain. As you may know, the most known standard on Ethereum is ERC-721. Since its creation, several other standards (ERC-1155, ERC-2981, ERC-4907,...) have emerged to meet various use cases. More details here: rya-sge.github.io/access-denie...

Why Secure Elements make a crucial difference to Hardware Wallet Security | Ledger In contrast with the previous generations of Trezor devices, which the Ledger Donjon showed to be vulnerable to physical seed recovery attacks, the Trezor Safe line of products brings huge security im...

Ledger's article on the security and integrity of the Trezor Safe 3 crypto wallet firmware is a great read to better understand how the new Trezor models (Safe Family) work (Secure Element, firmware integrity, chips used)
www.ledger.com/why-secure-e...
blog.trezor.io/trezors-mult...

Taurus Blog - ERC-1400 for Tokenized Securities: Analysis and Deployment with Taurus-CAPITAL ERC-1400 for Tokenized Securities: Analysis and Deployment with Taurus-CAPITAL

How to tokenize on Ethereum and EVM based blockchain? My last article on Taurus blog is a deep dive into ERC-1400, one of the oldest tokenization standards (2018). www.taurushq.com/blog/erc-140...

GitHub Action hack likely led to another in cascading supply chain attack A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed to have led to the recent breach of "tj-actions/changed-files" that leaked CI/CD secrets.

A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed to have led to the recent breach of "tj-actions/changed-files" that leaked CI/CD secrets.

A couple weeks ago we published our monthly release of ZK Mesh: the February 2025 Recap.

Wondering which articles/threads are the most popular amongst our #ZKMesh readers so far?

ZK Mesh Feb 2025 Top 5, here we go
🧵 👇

open.substack.com/pub/zkmesh/p...

damn this halo2 book is soooo goooood halo2.zksecurity.xyz/intro/

Coinbase phishing email tricks users with fake wallet migration A large-scale Coinbase phishing attack poses as a mandatory wallet migration, tricking recipients into setting up a new wallet with a pre-generated recovery phrase controlled by attackers.

A large-scale Coinbase phishing attack poses as a mandatory wallet migration, tricking recipients into setting up a new wallet with a pre-generated recovery phrase controlled by attackers.

Sepolia Pectra fork incident recap:
"we quickly realized that, because the deposit contract is token gated, an ERC-20 transfer event was emitted whenever a deposit was processed.
mariusvanderwijden.github.io/blog/2025/03...

Bybit hack deep dive by ncc group www.nccgroup.com/us/research-...