Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Socket researchers uncovered 19 Chrome and Edge extensions, 14 built by attackers, five acquired from legitimate developers, running a modular framework that drains crypto wallets, harvests exchange sessions, and steals credentials since as early as February 2024.
Attackers adopted orphaned Arch User Repository packages and rewrote their build scripts to pull a malicious npm dependency (atomic-lockfile), delivering a Rust credential stealer with an optional root-only eBPF rootkit. Arch's official repositories were not affected.
Threat actors used credentials harvested in the TeamPCP Trivy supply-chain compromise (CVE-2026-33634) to breach Cisco's development environment, cloning 300+ GitHub repositories - including AI Assistant and AI Defense source code - and accessing a small number of AWS accounts, according to BleepingComputer.
