North Korean Hackers Behind Axios npm Attack — Says Google
The same North Korean threat group that deployed AI-generated deepfakes to trick cryptocurrency executives into handing over system access has now pu…
Latest Posts
Chrome's WebGPU Engine Is Becoming Hackers' Favorite Target — Update Now
Google has patched a zero-day vulnerability in Chrome that attackers are already exploiting — and this time, the target isn't JavaScript or the b…
Anthropic's Claude Code source code exposed via npm package
A 59.8 MB JavaScript source map file — a debugging artifact that translates compressed, minified code back into readable source — was accidentally bu…
Opening a Single File in Vim Can Hand Attackers Full Control of Your System
A two-bug chain quietly sitting in Vim since version 9.1.1391 lets a malicious file execute arbitrary shell commands the moment you open it — no plug…
Axios Hack Alert: Malicious npm Versions Drop RAT on macOS, Windows, and Linux
Developers relying on axios — the JavaScript HTTP client installed over 300 million times weekly — woke up Tuesday to a nightmare scenario: two versi…
Telegram 0-Day: One Sticker Could Hack You — Telegram Calls It Fake
[Updated: March 30, 2026 — Score revised from 9.8 to 7.0. Original story below.] On Sunday, Telegram's official account dismissed a newly disclos…
Apple's Swift Programming Language Now Officially Builds Android Apps
After roughly a year of groundwork, Apple's Swift programming language has crossed what was once considered an uncrossable line — it now official…
ShinyHunters Claims 350GB EU Commission Breach — Databases, Emails, and Contracts Up for Leak
The European Commission confirmed on Friday that its public-facing web infrastructure was hit by a cyberattack discovered on March 24 — and now a th…
The LiteLLM Hack Was Just the Opening Move. Now 300K Dark Web Users Are Being Armed With Ransomware
What started as a poisoned Python package has evolved into something with far darker implications — a coordinated alliance between supply chain hacke…
Hackers Are Actively Exploiting a Critical Microsoft SharePoint Flaw — Patch Now
Attackers are exploiting a critical remote code execution (RCE) vulnerability in Microsoft SharePoint that Microsoft patched two months ago but many …