GoKawiil
Hackers exploit React2Shell in automated credential theft campaign
(bleepingcomputer.com)
31.
32.
TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials
(darkreading.com)
33.
Trivy Supply Chain Attack Targets CI/CD Secrets
(darkreading.com)
34.
Ransomware's New Era: Moving at AI Speed
(darkreading.com)
35.
IEEE Partners With Academia to Create Microcredential Programs
(spectrum.ieee.org)
37.
How infostealers turn stolen credentials into real identities
(bleepingcomputer.com)
38.
Operation DoppelBrand: Weaponizing Fortune 500 Brands
(darkreading.com)
39.
40.
Credentials for Linux: Bringing Passkeys to the Linux Desktop
(news.ycombinator.com)
41.
Malicious packages for dYdX cryptocurrency exchange empties user wallets
(arstechnica.com)
42.
Protests Don't Impede Iranian Spying on Expats, Syrians, Israelis
(darkreading.com)
43.
The Double-Edged Sword of Non-Human Identities
(bleepingcomputer.com)
44.
Not a Kids Game: From Roblox Mod to Compromising Your Company
(bleepingcomputer.com)
45.
47.
48.
1Password is introducing a new phishing prevention feature
(theverge.com)
49.
Multipurpose GoBruteforcer Botnet Targets 50K+ Linux Servers
(darkreading.com)
50.
GoBruteforcer Botnet Targets 50K-plus Linux Servers
(darkreading.com)
51.
ownCloud urges users to enable MFA after credential theft reports
(bleepingcomputer.com)
52.
Cloud file-sharing sites targeted for corporate data theft attacks
(bleepingcomputer.com)
53.
54.
55.
FBI seizes domain storing bank credentials stolen from U.S. victims
(bleepingcomputer.com)
56.
Show HN: X Writer – VS Code extension to post tweets from your editor
(news.ycombinator.com)
57.
Show HN: X Writer – Tweet from VS Code Without Distractions (BYOK, Open Source)
(news.ycombinator.com)
58.
59.
Post-mortem of Shai-Hulud attack on November 24th, 2025
(news.ycombinator.com)