Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines Summary One of npm’s most-used HTTP clients, Axios, was briefly compromised when attackers hijacked a maintainer’s…
Contracts are in C++26 despite disagreement over their value Summary WG21 (the ISO C++ committee) approved the C++26 standard at its Croydon meeting on 28 March 2026. Herb Sutter called…
Schrödinger’s carbon’: The misclassification of carbon capture and storage as standard mitigation Summary Rosalie Arendt (University of Twente) warns that carbon capture and storage (CCS) is widely treated as a…
AI-Powered ‘DeepLoad’ Malware Steals Credentials, Evades Detection Summary Researchers have identified a new malware family named “DeepLoad” that steals credentials the moment it lands on a host. It captures stored…
F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation Summary F5 has re-categorised CVE-2025-53521 — originally disclosed in October as a high-severity denial-of-service issue — as a remote code execution (RCE)…
Telnyx joins LiteLLM in latest PyPI package poisoning tied to Trivy breach Summary Researchers from Ox Security say the threat group TeamPCP — linked to the recent Trivy supply-chain compromise…
FCC says it’s making it easier for US telcos to ditch legacy lines Summary The US Federal Communications Commission has adopted a Report and Order that makes it simpler for…
Artemis II countdown begins as NASA prepares for crewed Moon flyby Summary NASA has started preparatory steps for the Artemis II crewed lunar flyby, with the formal countdown due to…
Storm Brews Over Critical, No-Click Telegram Flaw Summary A disputed, high-severity vulnerability has been reported in Telegram that ZDI (Trend Micro’s Zero Day Initiative) says could allow remote, zero-click compromise…
Citrix NetScaler bug exploited in days, may be multiple flaws in a trench coat Summary Researchers warn that a critical Citrix NetScaler vulnerability (CVE-2026-3055) is being exploited in the wild…
