Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Stripe introduces a benchmark suite to evaluate whether AI agents can build real-world Stripe integrations across backend, ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

This photograph shows a screen during the 18th edition of the "InCyber" Forum, an international cyber security event, at the Grand Palais in Lille, northern France on April 1, 2026. The forum, which ...

Big AI breakthroughs aren't the only interesting things happening.

Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of ...

Rust 1.97.0 shipped July 9, 2026, delivering the change that compiler engineers and tooling authors have been preparing for since RFC 2603 was drafted in 2018: the v0 symbol mangling scheme is now the ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

AI agents such as OpenClaw are turning developer workstations into always-on edge servers. We test whether the Dell Pro Max ...

Omp (oh-my-pi) is a batteries-included terminal coding agent with LSP, debugger, subagents and hash-anchored edits. Here's ...