WeaselBiscuit Stealer Spreads Through 13 npm Packages to Grab Chrome Data

Red Hat has patched a critical 9.8-rated remote code execution vulnerability in Linux TCP, while Ubuntu has released fixes for testing. The flaw is severe and affects widely used Linux networking code, making prompt patching important for exposed systems.

A new wave of cyberattacks targeting refrigeration systems has hit supermarkets across Europe, prompting stores to remove food from shelves. The incidents raise concerns about food safety and supply-chain disruption as retailers assess affected inventory. Authorities and companies are investigating the scope and impact.

Google disrupted a botnet that had infected roughly 1.3 million Android devices, many of them TV streaming boxes, according to The Hacker News. Investigators found that a TV box manufacturer had sold criminal access to its own devices, embedding the malware at the supply-chain level. The case highlights how cheap connected hardware can ship with backdoors that turn consumer devices into a large-scale attack network.

The Hacker News reports that a shared ChatGPT link may allow attacker-controlled code to execute within a user's session and expose private chats. The issue matters because it could turn a seemingly ordinary shared conversation into a route for account compromise and data exposure.

Chinese hackers reportedly used an AI-powered tool called ARTEX to target more than 200 organizations worldwide. The campaign matters because AI-assisted attacks could scale intrusion efforts and raise risks for governments and businesses.