Hackers exploit critical auth bypass in Gitea Docker image

Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service ...
The Hacker News

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

China-linked Silver Fox deploys the Rust-based MODBEACON RAT through fake software installers, targeting technology, ...
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Hackers tried to backdoor Injective NPM package to steal wallet keys

Socket found a compromised Injective npm package stealing wallet keys amid rising crypto supply chain attacks.
SecurityWeek

AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...
The Hacker News

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command ...

Hackers exploit Roundcube flaw to spy on academic researchers

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...
Android

Malware-as-a-Service: RedWing Malware Lets Hackers Rent Access into Your Android Phone

Researchers at Zimperium have uncovered RedWing, a new Android malware-as-a-service sold through Telegram with subscription tiers, a support bot, and how-to videos. Once installed, it can steal ...