Malware reads its C2 address out of a poem
PoeLLM reads its command-and-control address out of a poem. The malware, an ELF binary named libgcrypt , pulls four words or phrases from a poem tit…
Programming
⚑ Report a ProblemLatest Programming news from Tech News
All topics
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
rust
security
showdev
testing
tutorial
typescript
webdev
Advanced Tools vs. Traditional Skills: Balancing Malware Analysis Training in the AI Era
Introduction: The Evolving Landscape of Malware Analysis Malware analysis remains a critical discipline in cybersecurity, where the battle against m…
Hidden program in cheap Android phones turns them into advertising tools from the factory
Bitdefender details Midnight Mimosa, a preinstalled firmware malware found on low-cost MediaTek-based Android devices across 150+ countries. The ana…
TASK#STOMP: A Windows Backdoor That Lives in Scheduled Tasks and VBS
TASK#STOMP: A Windows Backdoor That Lives in Scheduled Tasks and VBS Securonix published an analysis of TASK#STOMP, a Windows backdoor that uses onl…
Stolen passwords are exposing America’s water providers to hackers
Researchers say another looming threat hangs over some of America's most important critical infrastructure.
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
YARA Rules for Beginners: Writing Your First Malware Detection Signature
YARA Rules for Beginners: Writing Your First Malware Detection Signature TL;DR: YARA is a pattern-matching engine used by malware analysts, incident…
Матрешка из Base64 и ROT13: разбираем вредоносный .sh, который пришел за FreePBX
Мне в руки попался файл с расширением .sh и, конечно же, его пришлось изучить. Открываю файл — первая половина более-менее читаемая, а дальше начина…
Anatomy of a Nim Infostealer
Tracing exfiltration and self-deletion through static, dynamic and advanced static analysis Vasilis Mantas — Threat Detection Engineer Verdict: A 64…
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
That fake Grand Theft Auto VI demo is actually just malware
Grand Theft Auto fans, eager for news about one of the most anticipated video games of all time, appear especially vulnerable to this new cyberattac…
How we took malware advisories beyond npm
GitHub malware advisories no longer stop at npm. Here's how we wired OpenSSF's malicious-packages data into the Advisory Database, and why we built…
12 Signs Your Website Has Been Hacked
Originally published on the Bug Circuit blog . If your site shows a browser warning, redirects visitors somewhere strange, has admin accounts you di…
Denying the Worm: Detecting SANDWORM_MODE and the Emerging Class of AI Toolchain Supply Chain Attacks
SANDWORM_MODE represents a sophisticated multi-stage npm supply chain worm discovered in early 2026. Unlike traditional attacks, it specifically tar…
I caught a trojan in my MCP marketplace. Here's the 8-layer defense I built.
Two weeks ago, a Windows trojan slipped into my MCP (Model Context Protocol) marketplace. The malware was Trojan:Win64/Lazy.PGPK!MTB , hidden inside…
FBI arrests man accused of using Steam games to drain victims’ crypto wallets
Prosecutors accused 21-year-old student Zyaire Wilkins of publishing on Steam several fake video games that contained malware, infecting thousands o…
Android verification is coming: Google confirms timeline and supported app stores
A new system service will roll out this month ahead of big changes starting in September.
Rust Crate 'onering' Compromised: Malicious Code Exfiltration Risk Mitigated with Updated Version
Introduction and Background The Rust ecosystem, celebrated for its memory safety and performance, relies heavily on crates —its package management s…
A hacker group is poisoning open source code at an unprecedented scale
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.