The Hacker News (2 hours ago)
GitHub has announced that it’s introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.
Read the full story on The Hacker News.
Proton Drive, Docs, Mail, Calendar, and VPN access for a month, for just a dollar
US midterm elections are just days away, and an attack on the FEC has left millions of dollars in donations undeclared.
Governments can make it harder to get around internet restrictions, but eliminating the workarounds is another matter entirely.
The trick at the center of this campaign is not an exploit. It is a feature. Pluto Security’s analysis of a cryptominer operation on the Hugging Face Hub shows that the attacker never needed to break anything. The model-loading library runs the Python that infects a machine exactly as designed.
Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act.
AI is beginning to take over much of the work that has traditionally defined the security analyst’s job. Investigating alerts, collecting evidence, correlating activity across tools, and executing response actions are becoming tasks that AI systems can perform on their own.
A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account.
26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it.
Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild.
An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project’s own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October.
71 active sources
26 Turkish · 45 English
All sources
