ACTIVE THREATS: CISA: Hackers now exploit max severity GitLab flaw in attacks • How a hole in Lenovos login system let hackers walk into 5,000 Dropbox accounts • The US military just turned off ad tracking on its phones. Maybe you should too • Hackers exploit Tencent app flaw to deploy GrayRabbit malware • CRPx0 ransomware: what you need to know ACTIVE THREATS: CISA: Hackers now exploit max severity GitLab flaw in attacks • How a hole in Lenovos login system let hackers walk into 5,000 Dropbox accounts • The US military just turned off ad tracking on its phones. Maybe you should too • Hackers exploit Tencent app flaw to deploy GrayRabbit malware • CRPx0 ransomware: what you need to know
The full HackWire archive — 3,892 stories, newest first.
Nearly 300 malicious npm packages stole developer credentials via typosquatting (fake package names like "lodahs" for "lodash") and dependency confusion. The attack targeted Fortune 500 companies and government contractors, accumulating over 4 million installations before removal.
An audit revealed most popular password managers fail to clear sensitive data from memory after vaults lock, leaving decrypted credentials vulnerable to local attacks despite their security promises.
Banshee 3.0 macOS malware exploits stolen Apple developer certificates to bypass Gatekeeper protections, distributing via trojanized GitHub apps to harvest credentials and cryptocurrency. Priced at $3,000/month on Russian forums, the sophisticated information stealer represents a shift toward weapon
The cybersecurity industry has a 4.8 million-person skills gap despite workforce growth, with the shortage expanding 15% year-over-year. Employers reject entry-level talent while demand from AI/ML expertise and regulatory compliance outpaces workforce expansion.