DeFi's "worst year in terms of hacks," Ledger's CTO said, as the Kelp exploit shows how a single point of failure can cascade ...

Developers and traders warn of structural risks as a cross-chain exploit spreads fear and prompts billions to flee DeFi ...

Hackers exploited a cross-chain bridge on Saturday, draining nearly $300 million from a key piece of decentralized finance ...

Kelp DAO's rsETH bridge was exploited for $292M via LayerZero. Stolen funds hit Aave as DeFi losses cross $600M across 10+ ...

Welcome to Saturday Hashtag, a weekly place for broader context. Saturday Hashtag: #SilentDigitalStorm originally appeared on ...

A wave of crypto hacks and attacks followed the Drift exploit, hitting at least 12 entities, including Rhea Finance and Grinex, this week.

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

Shadow AI 2.0 isn’t a hypothetical future, it’s a predictable consequence of fast hardware, easy distribution, and developer ...

A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation, leveraged ...

Marimo CVE-2026-39987 exploited within 10 hours of disclosure, enabling unauthenticated RCE and credential theft, emphasizing urgent patching needs.

A threat actor started exploiting CVE-2026-39987, an unauthenticated RCE vulnerability in Marimo, nine hours after public ...