Cybersecurity briefing, 2026-08-02

Here's today's line: patching a hardware wallet doesn't fix a seed it already generated.

• Coldcard patch leaves old seeds exposed
• Hotel Wi‑Fi becomes a cloud access trap
• Ad tag compromise turns trusted sites into stealers
• Rails image upload bug exposes server secrets
• Paste-to-Terminal turns Macs into their own installers

Recent editions

• Saturday, August 1, 2026: PLC access reaches past disruption into lockout · 14 stories
• Friday, July 31, 2026: OWA access now survives resets and reimaging · 15 stories
• Thursday, July 30, 2026: Shared PLC exposure turns one attack into many · 16 stories
• Wednesday, July 29, 2026: One malicious page can reach Android root · 17 stories
• Tuesday, July 28, 2026: BMCs stay crackable before login · 17 stories
• Monday, July 27, 2026: Spring Boot fat-JARs stay exposed after Fastjson bypass · 16 stories
• Sunday, July 26, 2026: Windchill patch window became Cl0p's entry point · 5 stories