RESEARCH: Global Web3 Security Alerts & Advisories

Executive Summary

The last 24 hours have seen critical alerts across Web3 and traditional cybersecurity, including a verified database liquidation on underground forums exposing merchant API keys and wallet private keys. AI-powered vulnerability discovery by Anthropic’s Glasswing project found over 10,000 critical flaws in open-source projects, but only 97 have been patched due to the scale. SAP released May 2026 patches addressing 15 vulnerabilities, including two critical Commerce Cloud flaws. Microsoft’s May Patch Tuesday fixed 120 CVEs, 17 of them critical, with 16 discovered by a new multi-model agentic security system. The practical reality is that the patching ecosystem is overwhelmed, and Web3-specific threats like private key exposures remain a severe, ongoing risk for decentralized finance (DeFi) and crypto platforms.

Regulatory Framework

The primary cybersecurity advisory body issuing alerts on exploited vulnerabilities and threat campaigns is CISA, which maintains the Known Exploited Vulnerabilities (KEV) catalog and provides timely advisories for critical infrastructure and technology sectors. Cybersecurity Alerts & Advisories - CISA
Vulnerability intelligence is aggregated and searchable through CVE Find, a search engine indexing CVE, CWE, and CISA KEV data, enabling security teams to track critical flaws across multiple databases. Database CVE, CWE, CISA KEV & Vulnerability Intelligence | CVE Find
The Risk Intel security vulnerability tracker provides multi-source monitoring for newly disclosed vulnerabilities, supporting threat intelligence workflows for organizations managing attack surfaces. Security Vulnerability Tracker
SecuriTricks publishes the latest vulnerabilities, IOCs, and attack reports for integration into SIEM systems, helping analysts stay current on emerging cyber threats. SecuriTricks - Latest Vulnerabilities, IOCs and attack reports

Licensing Requirements

Not applicable to this cybersecurity-focused research task. No cryptocurrency-specific licensing requirements are covered in the provided sources.

AML/KYC Requirements

Not applicable to this research scope. No AML/KYC requirements are discussed in the provided security advisory and vulnerability sources.

Enforcement Actions

Not applicable to this research scope. No enforcement actions are documented in the provided sources.

Tax Treatment

No tax guidance has been issued for virtual assets within the context of these cybersecurity advisories.

Key Gaps & Risks

A critical Web3 risk is the exposure of merchant API keys and wallet private keys in a massive database liquidation campaign on an underground hacker forum, verified by threat intelligence monitoring, which directly threatens funds and access to crypto platforms. Brinztech Web3 Sector Alert: Critical Merchant API & Wallet Private ...
The Glasswing project by Anthropic found 10,000+ critical vulnerabilities across 1,000 open-source projects in a single month, yet only 97 have been patched, revealing a massive gap between vulnerability discovery and remediation capacity in the open-source ecosystem. Anthropic’s Claude Mythos found 10,000 critical vulnerabilities in one month. The patches can’t keep up.
Microsoft disclosed 1,273 vulnerabilities in 2025, a dip from 1,360 the prior year, but the proportion of critical vulnerabilities doubled, signaling an escalation in severity even as total numbers dropped. Critical Microsoft Vulnerabilities Doubled: From Exposure to Escalation
The May 2026 Patch Tuesday addressed 120 CVEs from Microsoft, 17 of them critical, with 16 uncovered by a new multi-model agentic security system, highlighting the growing role of AI in vulnerability research. Microsoft Fixes 17 Critical Flaws in May Patch Tuesday
SAP’s May 2026 security updates fixed 15 vulnerabilities, including two critical flaws in Commerce Cloud and S/4HANA, which could expose enterprise data and commerce operations if unpatched. SAP fixes critical vulnerabilities in Commerce Cloud and S/4HANA
The DeFi Hacks Database tracks over $10 billion in historic losses across chains and attack types, providing a critical resource for analyzing Web3 security trends, but no new 24-hour alerts are documented in the provided source. DeFi Hacks Database | Web3 Attacks & Crypto Exploits Tracker
Texas Tech’s groundbreaking for a Critical Infrastructure Security Site highlights growing investment in physical and cyber resilience, but cybersecurity roles remain undersupplied, particularly in cloud security and threat intelligence. Texas Tech breaks ground on Critical Infrastructure Security Site
Forbes notes that cybersecurity roles are becoming more specialized, with organizations building deeper expertise in critical areas such as cloud security and threat intel, but the skills gap persists as a systemic risk. The Critical Cyber Skills Every Security Team Still Needs