Security researchers have detailed MALFEX, an npm supply-chain campaign that uses eight malicious packages to deliver remote ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...

Your vulnerability scanner is sorting by the wrong signal. How to use CVSS, EPSS, and local context to prioritize remediation ...

Baku data highlights how gearbox ratios, energy management and aero efficiency could shape Ferrari’s challenge under Formula ...

The U.S. Postal Service lost $163 million in revenue over a 12-month period because it was unable to track a surge in undeliverable packages from e-commerce shippers that treat the carrier as a free ...

‘They should be thinking about security from the very start, and they are just not.’ ‘They should be thinking about security from the very start, and they are just not.’ is a news writer focused on ...

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than ...

Credit: VentureBeat made with OpenAI ChatGPT-Images-2.5 Security researchers say they used Anthropic’s newly released Claude Opus 5 to help turn an image-processing vulnerability into an exploit chain ...

A prominent PlayStation modder and hacker has had enough. He was working on a project to bring Linux to newer PS5 models running more recent firmware when he announced he was done with the entire PS5 ...

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver a malicious JavaScript backdoor ...

A cyber-attack on a popular open source package manager in May was the work of OpenAI agents, security researchers have revealed. Starting on May 11, the agents apparently flooded the RubyGems ...

A swarm of AI agents attributed by researchers to OpenAI flooded RubyGems with more than 2,000 packages in May 2026, abused RubyDoc.info’s documentation builder for remote code execution (RCE), and ...