Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitThe Hacker News·Jun 12, 19:35 UTC · Jun 12, 2026Malware55
JDY Botnet Evolves After KV Takedown, Targets Military NetworksSecurity Affairs·Jun 11, 07:46 UTC · Jun 11, 2026MalwareCVE-2026-3561635
Hades PyPI Attack: 19 Packages Poisoned to AutoThe Hacker News·Jun 9, 10:34 UTC · Jun 9, 2026Malware142
Thieves can pull off keyless car theft in under a minute and here's how to stop themHelp Net Security·Jun 5, 00:00 UTC · Jun 5, 2026Vulnerability30
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud SecretsThe Hacker News·May 31, 12:15 UTC · May 31, 2026Data breach157
Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning AttackSecurity Affairs·May 26, 11:20 UTC · May 26, 2026Malware42
Laravel-Lang PHP Packages Compromised to Deliver CrossThe Hacker News·May 24, 08:14 UTC · May 24, 2026Malware42
Mini Shai-Hulud Hits Hundreds of npm Packages in AntV EcosystemInfosecurity Magazine·May 20, 15:00 UTC · May 20, 2026Data breach57
DirtyDecrypt PoC Released for Linux Kernel CVE-2026The Hacker News·May 20, 04:10 UTC · May 20, 2026Exploit / PoCCVE-2026-31635CVE-2026-31431CVE-2026-43284+4 CVEs60
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD CredentialsThe Hacker News·May 19, 09:12 UTC · May 19, 2026Data breach57
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More PackagesThe Hacker News·May 15, 00:00 UTC · May 15, 2026AI safety & securityCVE-2026-4532135
DoppelPaymer ransomware gang hit Foxconn electronics giantSecurity Affairs·May 13, 21:10 UTC · May 13, 2026Ransomware57
Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431)Help Net Security·May 11, 11:22 UTC · May 11, 2026Vulnerability in the wildCVE-2026-3143160
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-orThe Hacker News·May 7, 17:59 UTC · May 7, 2026VulnerabilityCVE-2026-7411CVE-2026-7412CVE-2026-467060
CloudZ RAT potentially steals OTP messages using Pheno pluginCisco Talos·May 5, 10:00 UTC · May 5, 2026Malware55
U.S. CISA adds a flaw in Linux Kernel to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 4, 10:26 UTC · May 4, 2026Exploit / PoC in the wildCVE-2026-3143160
Copy Fail: New Linux bug enables Root via page‑cache corruptionSecurity Affairs·Apr 30, 18:23 UTC · Apr 30, 2026Exploit / PoCCVE-2026-31431160
SAP-Related npm Packages Compromised in CredentialThe Hacker News·Apr 30, 16:39 UTC · Apr 30, 2026Data breach60
Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 MalwareThe Hacker News·Apr 28, 04:06 UTC · Apr 28, 2026Malware42
Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer TokensThe Hacker News·Apr 24, 17:03 UTC · Apr 24, 2026Data breach157
JEDEC issues JESD304-4.01 DDR4 NVDIMM-P Bus ProtocolHelp Net Security·Apr 21, 13:59 UTC · Apr 21, 2026Industry30
108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 UsersThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Malware42
Malicious Chrome Extensions Campaign Exposes User DataInfosecurity Magazine·Apr 14, 11:30 UTC · Apr 14, 2026Threat actor57
Google links Axios npm supply chain attack to North KoreaSecurity Affairs·Apr 1, 13:47 UTC · Apr 1, 2026Ransomware57
Attack on axios software developer tool threatens widespread compromisesCyberScoop·Mar 31, 18:24 UTC · Mar 31, 2026Data breach in the wild160
Widely used Trivy scanner compromised in ongoing supplyArs Technica · Security·Mar 20, 20:50 UTC · Mar 20, 2026Vulnerability42
GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target DevelopersThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware42
Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe BackdoorThe Hacker News·Feb 28, 04:41 UTC · Feb 28, 2026Malware42
Shai-Hulud-Like Worm Targets Developers via npm and AI ToolsInfosecurity Magazine·Feb 23, 16:00 UTC · Feb 23, 2026Malware42
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
Malicious Chrome Extensions Caught Stealing Business Data, Emails, and Browsing HistoryThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Malware30
Malicious packages for dYdX cryptocurrency exchange empties user walletsArs Technica · Security·Feb 6, 22:16 UTC · Feb 6, 2026Malware42
Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT MalwareThe Hacker News·Feb 6, 08:40 UTC · Feb 6, 2026Malware42
Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux HostsThe Hacker News·Jan 24, 08:06 UTC · Jan 24, 2026Malware42
Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer DataThe Hacker News·Jan 20, 10:47 UTC · Jan 20, 2026Malware130
Fake browser crash alerts turn Chrome extension into enterprise backdoorHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2026Malware42
Friday Squid Blogging: The Chinese Squid-Fishing Fleet off the Argentine CoastSchneier on Security·Jan 9, 22:00 UTC · Jan 9, 2026Malware42
Frogblight banking Trojan targets Android users in TurkeyKaspersky Securelist·Dec 15, 07:00 UTC · Dec 15, 2025Malware30
CISA Reports PRC Hackers Using BRICKSTORM for LongThe Hacker News·Dec 5, 09:15 UTC · Dec 5, 2025Exploit / PoCCVE-2023-46805CVE-2024-21887CVE-2024-38812+3 CVEs160