I’ve also made a couple overview pages that collect posts on specific topics: Package Management and Git. If you want to see everything I’ve written about either of those, those are good places to ...

Five malicious Rust crates and an AI bot exploited CI/CD pipelines and GitHub Actions in Feb 2026, stealing developer secrets ...

Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users ...

Specifically, Assured Security Consultants completed a code audit of GotaTun, Mullvad’s implementation of the WireGuard connection protocol, written in Rust. The audit consisted ...

InstallFix delivers an infostealer to your device.

Dutch intelligence is accusing Russia-backed hackers of running a “large-scale global” hacking campaign against Signal and ...

A China-linked advanced persistent threat actor tracked as UAT-9244 has been targeting telecommunication service providers in South America since 2024, compromising Windows, Linux, and network-edge ...

As national security services warn that Russian hackers are currently engaged in new global attacks against WhatsApp and Signal users, here’s how to stay safe.

By Anthony Deutsch AMSTERDAM, March 9 (Reuters) - Russian-backed hackers have launched a global cyber campaign to gain access to Signal and WhatsApp accounts used by officials, military personnel and ...

If you’ve used Linux for a long time, you know that we are spoiled these days. Getting a new piece of hardware back in the day was often a horrible affair, requiring custom kernels and lots ...

APT28 deploys BEARDSHELL and COVENANT since April 2024 targeting Ukrainian military, enabling cloud-based espionage and persistent surveillance.