Hackers can infect network-connected wrenches to install ransomware(arstechnica.com)

108 points by ColinWright 2 years ago | 91 comments

WinRAR 0-day that uses poisoned JPG and TXT files under exploit since April(arstechnica.com)

23 points by mfiguiere 3 years ago | 2 comments

Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic(arstechnica.com)

36 points by trustinmenowpls 1 year ago | 32 comments

Hackers spent 2 years looting secrets of chipmaker NXP before being detected(arstechnica.com)

181 points by curiousObject 2 years ago | 33 comments

Highly invasive backdoor snuck into open source packages targets developers(arstechnica.com)

6 points by carride 3 years ago | 0 comments

Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic(arstechnica.com)

51 points by Brajeshwar 1 year ago | 31 comments

NPM debug and chalk packages compromised(aikido.dev)

1287 points by universesquid 1 year ago | 699 comments

Aikido Security blog post reporting that the popular npm packages debug and chalk were compromised with malicious code in a supply-chain attack.

DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware(github.com)

367 points by tosh 1 year ago | 263 comments

GitHub security advisory reporting that DuckDB npm packages (duckdb 1.3.3, node-api, node-bindings, duckdb-wasm 1.29.2) were published with malware, listing patched versions.

Upcoming breaking changes for npm v12(github.blog)

459 points by plasma 4 months ago | 189 comments

GitHub Changelog post announcing upcoming breaking changes in npm version 12.

Malicious versions of Nx and some supporting plugins were published(github.com)

427 points by longcat 1 year ago | 421 comments

GitHub security advisory from the nrwl/nx repository reporting that malicious versions of Nx and several supporting npm plugins were published.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.