AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
A fraudulent Web3 accelerator is using malicious npm packages to distribute malware and hijack traffic involving AI agents, according to The Hacker News. The campaign highlights supply-chain risks in open-source package registries and emerging threats targeting AI tooling.
A security flaw in Broadcom Wi-Fi chips lets attackers within wireless range run code as root on affected routers. The vulnerability remains unpatched, putting many home and business routers at risk. Exploitation could give attackers full control over network traffic and devices.
A security incident at OpenCode Console may have exposed API keys belonging to OpenAI, Anthropic and Google, according to The Hacker News. Stolen keys could let attackers run up bills or abuse model access on behalf of affected developers and organizations. Users of the service should rotate credentials and review usage logs for unauthorized activity.
Researchers flagged the npm package "imgdecode," which ships a Windows native addon that hides a shellcode loader, according to The Hacker News. The package abuses npm's install-time native compilation to run malicious code on developer machines, a technique that can slip past audits focused on JavaScript. It highlights the continuing risk of supply chain attacks targeting open-source package registries.
Attackers used a compromised ConnectWise credential to sign in to 173 Microsoft 365 tenants, according to The Hacker News. The incident highlights supply-chain and remote-management risks because a single credential can expose many customer environments. Affected organizations should rotate credentials, review sign-in logs, and enforce strong authentication and monitoring.
Schneier on Security published a Friday Squid Blogging post about squid before the Chicxulub meteor impact. The recurring feature shares squid-related research and curiosities rather than major news. It is a routine item with little broad impact.
Attackers briefly compromised AOMEI Backupper's update servers to push a malicious backdoor to users. The tampering reportedly lasted only minutes, highlighting supply-chain risks in software update systems. Users should check vendor guidance and scan affected systems for compromise.
A previously unreported threat cluster tracked as UAT-11985 is using counterfeit event invitations to phish affiliates of Taiwanese research institutions, employing adversary-in-the-middle (AitM) techniques against Google accounts to steal credentials and session tokens. The campaign demonstrates how convincing social-engineering lures can bypass standard credential protections, making it a notable risk for think tanks, universities, and policy organizations tied to Taiwan.
Security researchers disclosed an exploit for a kernel vulnerability in OpenBSD that had gone undetected for 37 years. The flaw, reportedly reachable through a legacy code path, could allow attackers to compromise the security-focused operating system. The finding is notable because OpenBSD is widely used for firewalls, routers, and other hardened systems.