Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses 
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug 
NSAuditor AI Enterprise 0.32.10: Verified Instruments, Auditor-Ready Evidence 
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks 
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
What's new: Researchers have identified a new technique called NullReceiver, used in two trojanized npm packages, "bianira-ui" and "fluid-type-ui," which...
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
What's new: Veeam, HashiCorp, and Django have released patches for critical vulnerabilities. Notable issues include a CVSS 10.0 cross-tenant bug...
NSAuditor AI Enterprise 0.32.10: Verified Instruments, Auditor-Ready Evidence
Every security tool tells you it is clean. Very few tell you what "clean" was measured against. Nsasoft US LLC...
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
What's new: A Chinese-speaking threat actor utilized the open-source Hermes Agent framework to command an AI model named DeepSeek for...
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
What's new: Device code phishing, leveraging the OAuth 2.0 device authorization grant, has rapidly evolved into a significant threat, with...