Cloud development platform Vercel was hacked
…Vercel confirmed in a post on X that a “security incident” had occurred, and that it impacted a “limited subset” of its customers. Vercel said that a compromised third-party AI tool…
Search
All sources
theregister.com
24
bleepingcomputer.com
24
techcrunch.com
12
appleinsider.com
6
xda-developers.com
6
neowin.net
5
9to5mac.com
5
wired.com
3
pcworld.com
3
wccftech.com
3
theverge.com
2
wundertech.net
2
Videos
More videos
They Hit TanStack. 518 Million Downloads. And the Security Cert Was Real.
They Got Trivy. They Got Axios. Now They're Coming for the Linux Foundation.
CopyFail Compromises The Last 9 Years Of Linux Distros
They're Getting Faster. Open Source Is Under Attack Right Now.
It's Bigger Than TeamPCP. Open Source Is Under Siege.
More Office Suite drama, Chrome downloads AI model without consent, Plasma 6.7 things - Linux News
WHAT IF…Your confidential data is exposed to public clouds? #sovereignAI
It just keeps getting worse
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News
Look what Intel took from us - Tech News April 12
Top stories
Fake Linux Foundation leader using Slack to phish devs
…who also serves as chief security architect of the Linux Foundation, said in an April 7 security advisory. "Executing the binary may result in full system compromise." Robinson declined to identify the…
Australia warns of ClickFix attacks pushing Vidar Stealer malware
…The attack typically tricks users into executing PowerShell commands to bypass security controls and deliver malware, typically info-stealers. Australian organizations and infrastructure entities are being targeted in attacks that involve compromised…
OpenAI confirms security breach in TanStack supply chain attack
OpenAI confirms security breach in TanStack supply chain attack By Lawrence Abrams May 14, 2026 03:07 PM OpenAI says two employees' devices were breached in the recent TanStack supply chain attack…
Discussions and forums
BREAKING NEWS: Data Breach Hits Miles Taylor's Anti-ICE Organizing Site GTFOICE.org
Signups, silence, and a suspicious text: users joined GTFOICE.org to protest ICE and woke up to messages claiming their data was sent to federal agencies. Just four days ago, Project Salt Box’s Michael Wriston and Defian…
Threat Intel: ShinyHunters Leaks 9.4GB Database of 7-Eleven Franchisee Systems Post-Extortion Refusal
Overview: On May 24, 2026, the data breach notification service Have I Been Pwned (HIBP) integrated a dataset originating from an April 2026 extortion campaign targeting 7-Eleven. The breach, attributed to the threat act…
Deploying Pulse monitoring agents as root on Proxmox
I just recently deployed Pulse monitoring solution for my Proxmox, VM and containers and have couple of questions on the security related things. I did my own research but couldn't figure out this permissions concern of …
New features, emojis, & security improvements: Here’s everything new coming to Android!
Hi Reddit, We just wrapped up The Android Show | I/O Edition, and a core theme of the show was how we’re making your phone more helpful so that you can spend less time looking at it and more time living your life. To mak…
The ChatGPT desktop app for Mac just got hit with a security breach - Engadget
…The why of it all is a bit convoluted, stemming from a security issue involving open-source code. A widely-used open-source library was compromised and two devices at the company…
TeamPCP hackers advertise Mistral AI code repos for sale
…OpenAI confirms security breach in TanStack supply chain attack Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Official SAP npm packages compromised to steal credentials Bitwarden CLI npm package compromised…
Popular node-ipc npm package compromised to steal credentials
Popular node-ipc npm package compromised to steal credentials By Bill Toulas May 15, 2026 01:10 PM Hackers have injected credential-stealing malware into newly published versions of node-ipc, a…
Telnyx package latest hit in PyPI supply-chain compromise
…Ox Security warned on Friday that TeamPCP - the group researchers link to the recent compromise of open-source vulnerability scanner Trivy, which led to malicious LiteLLM packages appearing on PyPI - is back…
Hundreds compromised daily in Microsoft device code phishes
Cyber-crime Hundreds of orgs compromised daily in Microsoft device code phishing attacks Who needs MFA when you've got EvilTokens? Hundreds of organizations have been compromised daily by a Microsoft device…
Top npm package backdoored to drop dirty RAT on dev machines
…Security firm StepSecurity found that both versions were published via the compromised npm account of "jasonsaayman," the project's primary maintainer, who was reportedly locked out of the account while the packages…