121.
122.
CISA: High-severity Windows SMB flaw now exploited in attacks
(bleepingcomputer.com)
123.
124.
Malicious crypto-stealing VSCode extensions resurface on OpenVSX
(bleepingcomputer.com)
126.
Hackers can steal 2FA codes and private messages from Android phones
(arstechnica.com)
127.
128.
Empathy for Dummies
(news.ycombinator.com)
129.
People Are Horrified by Lab-Grown Human Brains
(futurism.com)
130.
131.
132.
133.
Malicious Rust packages on Crates.io steal crypto wallet keys
(bleepingcomputer.com)
134.
NPM package caught using QR Code to fetch cookie-stealing malware
(bleepingcomputer.com)
135.
136.
Hidden risk in Notion 3.0 AI agents: Web search tool abuse for data exfiltration
(news.ycombinator.com)
137.
CISA exposes malware kits deployed in Ivanti EPMM attacks
(bleepingcomputer.com)
138.
An Afternoon at the Recursive Café: Two Threads Interleaving
(news.ycombinator.com)
139.
Tinycolor supply chain attack post-mortem
(news.ycombinator.com)
140.
Microsoft adds malicious link warnings to Teams private chats
(bleepingcomputer.com)
141.
Hackers left empty-handed after massive NPM supply-chain attack
(bleepingcomputer.com)
142.
Hackers steal 3,325 secrets in GhostAction GitHub supply chain attack
(bleepingcomputer.com)
143.
Pocket Scion is a synth you play with plants
(theverge.com)
144.
Should AI Get Legal Rights?
(wired.com)
145.
6 browser-based attacks all security teams should be ready for in 2025
(bleepingcomputer.com)
146.
Threat actors abuse X’s Grok AI to spread malicious links
(bleepingcomputer.com)
147.
What is it like to be a bat?
(news.ycombinator.com)
148.
What Is It Like to Be a Bat?
(news.ycombinator.com)
149.
Python has had async for 10 years – why isn't it more popular?
(news.ycombinator.com)
Today's top topics:
cnet