Malware

Legacy Python Bugs Enable PyPI Attacks via Domain Hijack 1d10add0-64b0-498b-85a5-79c8f9149bd2

1d10add0-64b0-498b-85a5-79c8f9149bd2

Legacy Python Bugs Enable PyPI Attacks via Domain Hijack

FHN November 28, 2025

Hidden vulnerabilities in old Python code can create serious risks for today’s development environments. A recent example...

Malware in Chrome Extension Found Stealing SOL via Hidden Swap Fees 3e145f38-39eb-4e46-ad9c-80c47493b262

3e145f38-39eb-4e46-ad9c-80c47493b262

Malware in Chrome Extension Found Stealing SOL via Hidden Swap Fees

FHN November 26, 2025

Security researchers at Socket discovered a deceptive Chrome extension called Crypto Copilot. It pretends to be a...

W3 Total Cache PoC Published, Putting Millions of WordPress Sites at Risk Programming and password concept

Programming and password concept

W3 Total Cache PoC Published, Putting Millions of WordPress Sites at Risk

FHN November 26, 2025

A proof-of-concept (PoC) exploit has been released for CVE-2025-9501, a critical command-injection vulnerability in W3 Total Cache,...

Windows Graphics Vulnerability Opens the Door to System Hijack with a Single Image

vulnerability

Windows Graphics Vulnerability Opens the Door to System Hijack with a Single Image

FHN November 20, 2025

A serious remote code execution flaw in Microsoft’s Windows Graphics Component allows attackers to take control of...

npm Package With 206K Downloads Steals GitHub Tokens npm-alternatives

npm-alternatives

npm Package With 206K Downloads Steals GitHub Tokens

FHN November 14, 2025

On November 7, Veracode researchers found a dangerous typosquatting attack targeting developers who use GitHub Actions. A...