For anyone not on Twitter. Please check out this tweet https://x.com/theinstagibbs/status/2082958675975553224

There's a vulnerability with seeds generated without a passphrase or proper dice rolls on a Coldcard mk2/mk3. if you're in that category, check your wallet, prepare to move your funds, but do so carefully and don't panic.

Coinkite put out a post as well: https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/