GoKawiil - Tech News

61.

Malicious Rust packages on Crates.io steal crypto wallet keys (bleepingcomputer.com)

2025-10-31 | related products | tags: crate, crates, malicious

62.

NPM package caught using QR Code to fetch cookie-stealing malware (bleepingcomputer.com)

2025-10-31 | related products | tags: code, codes, malicious

63.

Hidden risk in Notion 3.0 AI agents: Web search tool abuse for data exfiltration (news.ycombinator.com)

2025-10-31 | related products | tags: client, data, malicious

64.

CISA exposes malware kits deployed in Ivanti EPMM attacks (bleepingcomputer.com)

2025-10-31 | related products | tags: cisa, ivanti, malicious

65.

Tinycolor supply chain attack post-mortem (news.ycombinator.com)

2025-10-31 | by Scott Cooper | related products | tags: github, malicious, npm

66.

Microsoft adds malicious link warnings to Teams private chats (bleepingcomputer.com)

2025-10-31 | related products | tags: feature, malicious, message

67.

Hackers left empty-handed after massive NPM supply-chain attack (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, cloud, environments

68.

Hackers steal 3,325 secrets in GhostAction GitHub supply chain attack (bleepingcomputer.com)

2025-10-31 | related products | tags: gitguardian, github, malicious

69.

6 browser-based attacks all security teams should be ready for in 2025 (bleepingcomputer.com)

2025-10-31 | related products | tags: attackers, browser, malicious

70.

Threat actors abuse X’s Grok AI to spread malicious links (bleepingcomputer.com)

2025-10-31 | related products | tags: grok, instead, link

71.

Why you should delete your browser extensions right now - or do this to stay safe (zdnet.com)

2025-10-31 | by Jack Wallen | related products | tags: browser, extension, extensions

72.

How RubyGems.org protects OSS infrastructure (news.ycombinator.com)

2025-10-31 | by Marty Haught | related products | tags: malicious, org, rubygems

73.

Malicious Android apps with 19M installs removed from Google Play (bleepingcomputer.com)

2025-10-31 | related products | tags: anatsa, apps, google

74.

LLMs and coding agents are a security nightmare (news.ycombinator.com)

2025-10-31 | by Gary Marcus | related products | tags: agents, code, coding

75.

LLMs and Coding Agents = Security Nightmare (news.ycombinator.com)

2025-10-31 | by Gary Marcus | related products | tags: agents, code, coding

76.

DoubleAgents: Fine-Tuning LLMs for Covert Malicious Tool Calls (news.ycombinator.com)

2025-10-31 | by Justin Albrethsen | related products | tags: fine, llm, llms

77.

60 malicious Ruby gems downloaded 275,000 times steal credentials (bleepingcomputer.com)

2025-10-31 | related products | tags: gems, malicious, ruby

78.

Fake WhatsApp developer libraries hide destructive data-wiping code (bleepingcomputer.com)

2025-10-31 | related products | tags: com, github, malicious

79.

Wave of 150 crypto-draining extensions hits Firefox add-on store (bleepingcomputer.com)

2025-10-31 | related products | tags: add, extensions, koi

80.

Attackers exploit link-wrapping services to steal Microsoft 365 logins (bleepingcomputer.com)

2025-10-31 | related products | tags: email, link, malicious

81.

Inside a Real Clickfix Attack: How This Social Engineering Hack Unfolds (bleepingcomputer.com)

2025-10-31 | related products | tags: browser, clickfix, clipboard

82.

Flaw in Gemini CLI AI coding assistant allowed stealthy code execution (bleepingcomputer.com)

2025-10-31 | related products | tags: command, gemini, malicious

83.

Hackers breach Toptal GitHub account, publish malicious npm packages (bleepingcomputer.com)

2025-10-31 | related products | tags: github, malicious, packages

84.

Firefox-patch-bin, librewolf-fix-bin AUR packages contain malware (news.ycombinator.com)

2025-10-31 | related products | tags: aur, bin, malicious

85.

GitHub abused to distribute payloads on behalf of malware-as-a-service (arstechnica.com)

2025-10-31 | related products | tags: emmenhtal, github, malicious

86.

Beware! Research shows Gmail’s AI email summaries can be hacked (androidauthority.com)

2025-10-31 | related products | tags: email, gemini, google

87.

Google Gemini flaw hijacks email summaries for phishing (bleepingcomputer.com)

2025-10-31 | related products | tags: attacks, email, gemini

88.

Malicious Chrome extensions with 1.7M installs found on Web Store (bleepingcomputer.com)

2025-10-31 | related products | tags: chrome, extensions, malicious

89.

Dozens of fake wallet add-ons flood Firefox store to drain crypto (bleepingcomputer.com)

2025-10-31 | related products | tags: bleepingcomputer, extensions, fake

90.

New FileFix attack runs JScript while bypassing Windows MoTW alerts (bleepingcomputer.com)

2025-10-31 | related products | tags: attack, file, html