Daily Brief
Tue, May 12, 2026
6 min read
Tuesday, May 12, 2026
4 security patches: Tails 7.7.3, umbrelOS 1.7.3, umbrelOS 1.7.2, CVE-2024-52911 - Script Interpreter Remote Crash.
Releases: Boltz Client 2.12.0, Bitcoin Knots 29.3, Arti 2.3.0, Ark Network 0.9.5, Cashu TS 4.3.0, Tor Browser 15.0.12.
News
- NEW What the Bybit Exploit Reveals About Enterprise Custody. The $1.5 billion Bybit exploit succeeded despite multisig and hardware wallets.
- NEW New Alpha Release: Tor Browser 16.0a6. Tor Browser 16.0a6 is now available from the Tor Browser download page and also from our distribution directory .
- NEW Canada’s Bill C-22 Is a Repackaged Version of Last Year’s Surveillance Nightmare. Last year, the Canadian government pushed Bill C-2 , which would erode Canadian digital rights in the name of "border security." The bill was so bad it didn't even make it to committee because of the backlash from the...
- NEW Victory! End-to-End Encrypted RCS Comes to Apple and Android Chats. This week, Apple released iOS 26.5 , an update that supports end-to-end encryption for Rich Communication Services (RCS), meaning conversations between Android and iPhone will soon be encrypted in the default chat apps.
- NEW 2026050900. Tags: 2026050900 (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a, Pixel 10, P...
- NEW EFF and 18 Organizations Urge UK Policymakers to Prioritize Addressing the Roots of Online Harm. EFF joins 18 organizations in writing a letter to UK policymakers urging them to address the root causes of online harm-rather than undermining the open web through blunt restrictions.
- NEW OP_CHECKSHRINCS: A Hash-Based Signature Opcode for Post-Quantum Bitcoin. OP CHECKSHRINCS is a proposed Bitcoin opcode for post-quantum signatures whose security rests on SHA-256, the hash function Bitcoin already uses.
- NEW Blockstream Jade Now Supports Full Two-Factor Authentication Backup. In the latest 1.0.40 firmware update, Jade now holds 2FA codes and exports them when you need them on another device.
Tools
- NEW Tails 7.7.3. This release is an emergency release to fix a critical security vulnerability in the Linux kernel, as well as security vulnerabilities in Tor Browser and in the Tor client.
- NEW umbrelOS 1.7.3. umbrelOS 1.7.3 is an important security update that fixes the DirtyFrag (CVE-2026-43284 and CVE-2026-43500) security vulnerabilities recently discovered in the Linux kernel.
- NEW umbrelOS 1.7.2. umbrelOS 1.7.2 is an important security update that fixes the CopyFail (CVE-2026-31431) security vulnerability in the Linux kernel.
- NEW Boltz Client 2.12.0. Summary This release marks the final removal of the GDK wallet library.
- NEW CVE-2024-52911 - Script Interpreter Remote Crash. After Bitcoin Core 0.14.0 and before Bitcoin Core 29.0, validating a specially-crafted block may cause the node to access previously freed memory.
- NEW Bitcoin Knots 29.3. Bitcoin Knots version 29.3.knots20260508 is now available from: This release includes the RDTS softfork ( IMPORTANT INFORMATION BELOW ), new features, default configuration changes, and various bug fixes.
- NEW Arti 2.3.0. Arti is our ongoing project to create a next-generation Tor implementation in Rust.
- NEW Ark Network 0.9.5. What's Changed [client-lib] Update client wallet interface by @altafan in https://github.com/arkade-os/arkd/pull/1008 docs: add missing breaking changes documentation by @Dunsin-cyber in https://github.com/arkade-os/a...
- NEW Cashu TS 4.3.0. This release speeds up wallet restore by optimising legacy BIP-32 derivation - benchmarks showed roughly 2x speedup for the new cached batch path versus repeated BIP32 derivation of previous implementation.
- NEW Tor Browser 15.0.12. Tor Browser 15.0.12 is now available from the Tor Browser download page and also from our distribution directory .
- NEW Alby Hub 1.22.2. In this release Alby Hub adds a new AI & Agents page, an integrated on-chain wallet mode, custom user labels for transactions, redesigned settings pages, improved budget selection when creating app connections and sup...
- NEW Cashu TS 4.2.1. This release is technically a breaking change to the public type BatchMintRequest (and by extension, BatchMintPreview ), but treating as a patch as batch minting is new and experimental, not widely supported or used,...
- NEW ZEUS 13.0.1. v13.0.1 Highlights: - Bug fixes - The issue where recovering Embedded LND wallets from seed stall out has been fixed - 'Try Again' button shows for all wallet types upon payment error - Sweeping Cashu tokens to self-c...
- NEW Boltz Backend 3.13.0. This release features: - Arkade swaps : full Arkade protocol support - EVM commitment swaps : new EVM commitment lockup flow - Multi-LND support : backend and sidecar can now drive multiple LND nodes Bug Fixes - (evm)...
- NEW Core Lightning 26.06. Release Candidate 1 for Core Lightning v26.06 Highlights for Users - graceful command to prepare CLN for shutdown...
- NEW Blockstream Green iOS 5.4.0. Added - Aggregate fiat total balance across all wallet assets - Update Send flow for lightning Fixed - Swap improvements - QR Code improvements - Bug fixes Changed - Migrate lightning from Breez to Greenlight - Upload...
- NEW Blockstream Green Desktop 3.3.0. What's new in this release Added - Total fiat balance in wallet header - Expose AMP ID in wallet settings Changed - Updated GDK to 0.77.3 - Updated Qt to 6.11.0 - Improved support ticket submission - Improved logging...
- NEW Blockstream Green Android 5.4.0. What's new in this release Added - Aggregate fiat total balance across all wallet assets - Redesigned Send flow (recipient, select asset, select account) Fixed - Transaction pagination in transact tab - Navigate direc...
- NEW Specter DIY 1.10.3. Mandatory upgrade This is a mandatory upgrade for all Specter-DIY users.
- NEW SimpleX Chat 6.5.1. New in v6.5.1: - additional preset chat relay.
Other