Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
The Hacker News

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

GitHub releases npm 12 with install scripts off by default and begins phasing out 2FA bypass tokens for sensitive npm actions ...
Developer Tech

Socket: PyPI and npm payment SDK malware compromises CI/CD

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...
techtimes

First AI-Agent Ransomware Destroyed Data Even Payment Could Not Recover

a laptop screen with a webpage of the IT Army of Ukraine group of volunteer hackers. The IT Army of Ukraine first set up in the wake of Russia's devastating attack, and has since hugely grown in ...
Dark Reading

JadePuffer: The First Complete LLM-Driven Ransomware Attack

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...
XDA Developers on MSN

I gave my local LLM my Docker Compose files, and it found security holes I missed

Nothing broke, so I never looked.
Techzine Europe

AI agent carries out ransomware attack independently

Researchers at Sysdig say they have observed, for the first time, a ransomware attack carried out almost entirely by an AI agent. According to the ...
Tech Times

New APT Group Hits Power Grids in Three Countries with AI-Crafted Malware

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...
CSO Online

New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild

Citrix NetScaler received patches for another memory leak vulnerability similar to CitrixBleed, as well as memory overflow, file read and denial-of-service issues ...
Android Authority

I let Claude audit my messy Home Assistant setup, and it was a massive wake-up call

Spend enough time in the self-hosting and smart home hobby, and even the most ardent smart home enthusiast eventually reaches a moment where the excitement of adding new gadgets gives way to the ...
Neowin

Gmail users can now send end-to-end encrypted emails to anyone

Google has announced that certain Workspace subscribers can now send end-to-end encrypted emails to anyone, regardless of the provider. If you're a Gmail client-side encryption (CSE) user on a Google ...