The Hacker News (2 hours ago)
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits.
Read the full story on The Hacker News.
Four AI agents running on Google’s Gemini 4 Argon have defeated the Ender Dragon, Minecraft’s final boss, without human help. It took them 27 hours and 14 minutes from their first program, Google DeepMind researchers wrote in a paper published on arXiv.
Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users.
Tech giant walks away from flagship Essex project as power connection delays threaten to leave nation’s AI ambitions waiting until the 2030s
Politico obtained the confidential draft of the proposal, which a company spokesperson said included “sensible policies we believe Congress should act on.”
Democrats could win back control of Congress this November, and if they do, they’ll need to decide how to approach one of the country’s newest and thorniest political issues: AI.
A developer using Claude Code to help build a temperature monitor app was warned by the coding agent about a hidden crypto miner running on their system.
A flaw in Broadcom’s Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16.
An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.”
72 active sources
27 Turkish · 45 English
All sources
