Security incidents: MetaMask breach and Windows Paint RCE
MetaMask confirmed a September staking infrastructure breach that diverted about 0.385 ETH in rewards, and a critical Windows Paint RCE flaw was disclosed.
What we know
MetaMask confirmed attackers redirected ~0.385 ETH in staking rewards. Separately, a Windows Paint vulnerability (CVE-2026-83844) allows unauthenticated remote code execution.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.