A newly identified Falcon, also tracked as XG or Xiàng Gē. It is a NodeJS-based command-and-control (C2) framework that takes over victim browsers by running malicious JavaScript.

The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...

Attackers planted execution hooks targeting Claude, Gemini, Cursor, and Visual Studio Code, turning routine development activity into ...

PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497 , a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt ...

CISA ordered federal agencies to patch a critical Node.js Brotli decoder flaw by November 10 after confirming active ...

AirTags utilize Bluetooth signals to connect with Apple’s Find My network for efficient item tracking. They are especially practical for tracking luggage and ensuring the safety of small children ...

Captcha and CapSolver stopped documenting hCaptcha in early 2025. How token-based solving fits a scraper or test suite, with ...

Best VPN NordVPN Review Does NordVPN Work in China? How to Use It in 2026 China blocks Google, WhatsApp, Instagram, and most of the apps travelers use at home, and its Great Firewall blocks most VPN ...

Add Bob Vila (opens Google in a new window or tab) More information Adding us as a Preferred Source in Google by using this link indicates that you would like to see more of our articles in Google ...

The Node2Shell vulnerability in Brotli is under active attack. Patch Node.js to 26.12.1, 24.22.1 or 22.23.4 now.

Critical RCE flaws, millions of exploit attempts, rogue AI agents, supply chain attacks, leaked keys, and more.