Malicious npm Packages Infect Alibaba Tool Users with Cross-Platform RAT

The Hacker News reports that a shared ChatGPT link may allow attacker-controlled code to execute within a user's session and expose private chats. The issue matters because it could turn a seemingly ordinary shared conversation into a route for account compromise and data exposure.

Chinese hackers reportedly used an AI-powered tool called ARTEX to target more than 200 organizations worldwide. The campaign matters because AI-assisted attacks could scale intrusion efforts and raise risks for governments and businesses.

A reported TeamViewer vulnerability allows a remote computer being controlled to attack the user who connects to it, reversing the usual trust direction. TeamViewer is widely used for remote support and access, so the flaw could expose technicians and other users to compromise when connecting to untrusted machines.

Attackers launched roughly 63,000 attempts in a single day to exploit a remote code execution vulnerability in WordPress, according to reporting by The Hacker News. The volume of activity signals active, widespread scanning and exploitation efforts against the widely used publishing platform. Sites running affected versions should patch immediately, since successful RCE exploitation can give attackers full control of a server.

Hackers stole $6.3 billion from the cryptocurrency exchange Binance in what is being described as a record crypto heist. The scale of the theft raises major security concerns for crypto exchanges and could increase regulatory scrutiny of the industry.