Explore

Trendline Trendline
GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories

GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories

GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories
Trendline Trendline
Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected

Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected

Itron Discloses Cyber-Attack, Ensures Operations Remain Unaffected
Trendline Trendline
Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security

Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security

Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security
Rapid Read Rapid Read
GlassWorm Malware Linked to Dozens of Open VSX Extension Clones

GlassWorm Malware Linked to Dozens of Open VSX Extension Clones

Security firm Socket has identified over 70 suspicious extensions on the Open VSX marketplace linked to the GlassWorm malware. These extensions, which are clones of popular ones, were published by newly created GitHub accounts. GlassWorm, first appearing in October 2025, is designed to steal credentials and cryptocurrency. The extensions are likely sleeper agents, intended to deploy malware through future updates. This pattern of cloned extensions mirrors previous GlassWorm waves, where extensions are initially published without a payload and later updated to deliver malware.
Rapid Read Rapid Read
Critical Bug in Cursor Software Poses Security Risk for Developers

Critical Bug in Cursor Software Poses Security Risk for Developers

A critical vulnerability has been identified in Cursor's software that could potentially allow remote code execution (RCE) through routine Git operations. The flaw involves the use of Git hooks and bare repositories, which could be exploited by embedding a malicious repository within a legitimate project. This vulnerability has been patched by Cursor, and there are no reports of it being exploited in the wild. The issue highlights the importance of securing software development tools against potential cyber threats.
Trendline Trendline
Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information

Vimeo Confirms Data Breach Involving User and Customer Information
Trendline Trendline
GitHub Copilot Transitions to Usage-Based Pricing Model

GitHub Copilot Transitions to Usage-Based Pricing Model

GitHub Copilot Transitions to Usage-Based Pricing Model
Trendline Trendline
GitHub to Implement Usage-Based Billing for Copilot AI Service

GitHub to Implement Usage-Based Billing for Copilot AI Service

GitHub to Implement Usage-Based Billing for Copilot AI Service
Trendline Trendline
Itron Discloses Cyber-Attack, Ensures Continued Operations

Itron Discloses Cyber-Attack, Ensures Continued Operations

Itron Discloses Cyber-Attack, Ensures Continued Operations
Trendline Trendline
Itron Confirms Cyberattack, Potential Data Breach on Energy Management Systems

Itron Confirms Cyberattack, Potential Data Breach on Energy Management Systems

Itron Confirms Cyberattack, Potential Data Breach on Energy Management Systems
Rapid Read Rapid Read
Open Source Software Compromised, User Credentials Stolen

Open Source Software Compromised, User Credentials Stolen

An open-source software package with over 1 million monthly downloads was compromised after attackers exploited a vulnerability in the developers' account workflow. This breach allowed access to signing keys and sensitive information. The attackers published a malicious version of the element-data package, which scoured systems for sensitive data such as user profiles, warehouse credentials, cloud provider keys, API tokens, and SSH keys. The malicious version, tagged as 0.23.3, was removed within 12 hours of its release. Developers have since rotated all affected credentials and audited their GitHub actions to prevent future vulnerabilities.
Trendline Trendline
OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years

OpenSSH Vulnerability Exposes Servers to Root Access for 15 Years