Ripple’s xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack

Posted on by

The Ripple cryptocurrency npm JavaScript library named xrpl.js has been compromised by unknown threat actors as part of a software supply chain attack designed to harvest and exfiltrate users’ private keys.
The malicious activity has been found to affe… Continue reading Ripple’s xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack→

Posted in Uncategorized

When confusion becomes a weapon: How cybercriminals exploit economic turmoil

Posted on by

It begins with a simple notification: “Markets in Free Fall.” Within moments, the headlines multiply: new tariffs, emergency actions, plummeting consumer confidence. Across boardrooms and break rooms, anxiety ripples at every level. People begin refres… Continue reading When confusion becomes a weapon: How cybercriminals exploit economic turmoil→

SWE-agent: Open-source tool uses LLMs to fix issues in GitHub repositories

Posted on by

By connecting powerful language models like GPT-4o and Claude Sonnet 3.5 to real-world tools, the open-source tool SWE-agent allows them to autonomously perform complex tasks: from fixing bugs in live GitHub repositories and solving cybersecurity chall… Continue reading SWE-agent: Open-source tool uses LLMs to fix issues in GitHub repositories→

The dark side of YouTube: Malicious links, phishing, and deepfakes

Posted on by

With billions of users, YouTube has become a tempting target for cybercriminals. They post malicious links in video descriptions and comments. Some send phishing emails to creators, posing as sponsors but attaching malware. Others hijack popular channe… Continue reading The dark side of YouTube: Malicious links, phishing, and deepfakes→