November 3, 2026
- BTCPay Server instances on 2.4.1 or earlier are having Bitcoin and Litecoin drained from hot wallets, using a different exploitation method against the flaw patched in August's 2.4.2 (BTCPay Server, The Hacker News). The project's guidance is blunt: patching alone may not evict an intruder — move to a fresh server with a new wallet and seed, sweep remaining funds, and rotate exposed credentials. · Vulnerabilities & Exploitation
in Agent-Driven Intrusions Get Named Operators, and a Kernel Bug Gets Mass-Scanned