[ad_1] TeamPCPthe threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, UiPath, Mistral AI, OpenSearch, and …
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages Read More
[ad_1] Ravie LakshmananMay 12, 2026Encryption / Mobile Security Apple on Monday officially released iOS 26.5 with support for end-to-end encryption (E2EE) to Rich Communication Services (RCS) in beta as part …
iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android Read More
[ad_1] The Federal Communications Commission (FCC) has eased some of its recent restrictions on foreign-made consumer routers and will now allow vendors of these products to continue issuing software and …
FCC Softens Ban on Foreign-Made Routers Read More
[ad_1] Ravie LakshmananMay 11, 2026Supply Chain Attack / DevSecOps Checkmarx has confirmed that a modified version of the Jenkins AST plugin was published to the Jenkins Marketplace. « If you are …
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack Read More
[ad_1] Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence (AI) system, marking the …
Hackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation Read More
[ad_1] A public exploit is available for a nine-year old vulnerability that affects the Linux kernel, paving the way for root privilege escalation. The flaw, which actually is two vulnerabilities …
Dirty Frag Exploit Poised to Blow Up on Enterprise Linux Distros Read More
[ad_1] Ravie LakshmananMay 11, 2026Cybersecurity / Hacking Rough Monday. Somebody poisoned a trusted download again, somebody else turned cloud servers into public housing, and a few crews are still getting …
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More Read More
[ad_1] Threat actors are abusing AI tools in increasingly sophisticated ways, including exploit development and attack orchestration. Google today published new research tracking how adversaries leverage AI in their cyber …
Hackers Use AI for Exploit Development, Attack Automation Read More
[ad_1] Defending a network at 2 am looks a lot like this: an analyst copy-pasting a hash from a PDF into a SIEM query. A red team script is being …
Your Purple Team Isn’t Purple — It’s Just Red and Blue in the Same Room Read More
[ad_1] Ravie LakshmananMay 11, 2026Supply Chain Attack / Threat Intelligence A malicious Hugging Face repository managed to take a spot in the platform’s trending list by impersonating OpenAI’s Privacy Filter …
Fake OpenAI Privacy Filter Repo Hits #1 on Hugging Face, Draws 244K Downloads Read More