Cybersecurity briefing, 2026-08-02

Here's today's line: patching a hardware wallet doesn't fix a seed it already generated.

• Coldcard Patch Leaves Old Seeds Exposed
• Hotel Wi‑Fi Becomes a Cloud Access Trap
• Ad Tag Compromise Turns Trusted Sites Into Stealers
• Rails Image Upload Bug Exposes Server Secrets
• Paste-to-Terminal Turns Macs Into Their Own Installers

Recent editions

• Saturday, August 1, 2026: Coldcard Patch Leaves Old Seeds Exposed · 14 stories
• Friday, July 31, 2026: OWA Access Now Survives Resets and Reimaging · 15 stories
• Thursday, July 30, 2026: OWA Access Now Survives Resets and Reimaging · 16 stories
• Wednesday, July 29, 2026: OWA Access Now Survives Resets and Reimaging · 17 stories
• Tuesday, July 28, 2026: BMCs Stay Crackable Before Login · 17 stories
• Monday, July 27, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 16 stories
• Sunday, July 26, 2026: Spring Boot Fat-JARs Stay Exposed After Fastjson Bypass · 5 stories