Results for “"worm"”
1–10 of 326 articles
Best match · title matches first
The Register
13 days ago
Worm armed 42 GitHub repos by hiding a payload too big to fail
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
1–10 of 326 articles
Best match · title matches first
The Register
Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
Dark Reading
A developer's GitHub account that was compromised several months earlier was used to push malicious code to unsuspecting users.
Dark Reading
Anthropic's latest study combined IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
The Register
Credential-stealing malware detected within minutes of npm release, but impact remains unknown
The Hacker News
The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 "contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code," Socket said
Dark Reading
The notorious Russian threat group is spreading an upgraded version of the botnet malware, which the FBI disrupted in 2022.
The Hacker News
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also crossing lines on their own. That is not a great combination. The rest of the week is more familiar: old bugs still working, fresh exploit chains, exposed systems, weak defaults, and simple paths that should have been harder to abuse. A few of
The Register
Calif says AI helped turn a VoIP memory bug into cross-platform RCE before Tencent shut it down
The Hacker News
Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their phone for it to work, but the caller must already be one of their WeChat contacts. Calif reported the flaw to Tencent in July and says the company has since
The Register
Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks