COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It

COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It 1. Basic Information Article Title : COLDCARD security audit phishing attack installs remote access tool Publisher : BleepingComputer Publication Date : August 5, 2026 Original Source : BleepingComputer Related Information Source : Proofpoint (campaign discovery and IOC sharing) Related…

dev.to ·1h ago

We haven't written up this one. Dev.to has the full story — the link below goes straight to it.

Read the original at dev.to →

More in Tech

Tech

Foreign VC flows in SEA: Who’s staying and who’s leaving?

Find out which global players are increasing their commitments and which are scaling back their presence in the region.

35m ago ·techinasia.com

Tech

Indian resale startup Vingo bags $1.2m seed

Vingo said the market is expected to grow from US$5.91 billion in 2026 to US$8.61 billion by 2030.

1h ago ·techinasia.com

Tech

Langflow CVE-2026-9198: Active Exploitation RCE via Auto-Login Superuser Token and Code Validator `exec()` Chain

Langflow CVE-2026-9198: Active Exploitation RCE via Auto-Login Superuser Token and Code Validator exec() Chain 1. Basic Information Article Title : CISA warns of hackers exploiting Langflow…

1h ago ·dev.to

Tech

khunt: SQL Injection to Resident Threat Inside Oracle Database Stealing Credentials with SYSTEM Privileges

khunt: SQL Injection to Resident Threat Inside Oracle Database Stealing Credentials with SYSTEM Privileges 1. Basic Information Article Title : Inside an Oracle Database SQL Injection Attack Publisher…

1h ago ·dev.to

Tech

Two gotchas when your Laravel app shells out to a CLI

TL;DR If a web request shells out to a slow CLI ( docker , kubectl , rsync …), move it to a queued job — PHP-FPM/nginx will kill it at ~30s anyway.

1h ago ·dev.to

Tech

Dev Log: 2026-08-05 — reverse proxies, email journeys, and a tenant that wasn't there

TL;DR On a deployment platform: added a real nginx reverse-proxy tier with health gating, provider capability enforcement , a standard blueprint library, and release rollback .

1h ago ·dev.to

Share this story

COLDCARD Audit Phishing: 25.7MB Batch File Embeds ScreenConnect and Uses Chat to Trick Admins into Running It

More in Tech

Foreign VC flows in SEA: Who’s staying and who’s leaving?

Indian resale startup Vingo bags $1.2m seed

Langflow CVE-2026-9198: Active Exploitation RCE via Auto-Login Superuser Token and Code Validator `exec()` Chain

khunt: SQL Injection to Resident Threat Inside Oracle Database Stealing Credentials with SYSTEM Privileges

Two gotchas when your Laravel app shells out to a CLI

Dev Log: 2026-08-05 — reverse proxies, email journeys, and a tenant that wasn't there