Posts of last few hours

A malicious release of the Tensorlake npm package has been published with a Shai-Hulud worm variant that can steal developer secrets and attempt to spread through connected software supply chains. The affected version, [email protected], was released on October 8, 2026. Tensorlake is a serverless sandbox platform for AI agents, and its npm package has recorded […]

The post Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets appeared first on Cyber Security News.

Scanning and remote code execution attempts targeting video surveillance devices in Ukraine rose between September 21 and October 1, 2026. Most activity focused on CVE-2021-36260, a critical command injection flaw in unpatched Hikvision products. The surge occurred alongside Russian missile and drone strikes, but researchers have not established a connection between the cyber activity and […]

The post Hikvision Camera Vulnerability Targeted in Remote Code Execution Exploitation Attempts appeared first on Cyber Security News.

Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture recovery phrases and private keys. The add-ons posed as wallet portals, desktop tools, and browser utilities, while hidden code attempted to send the secrets to attacker-controlled Cloudflare Workers. The campaign copied interfaces from Rabby Wallet and OKX Wallet, […]

The post Hackers Use Fake Firefox Wallet Extensions to Steal Crypto Recovery Phrases appeared first on Cyber Security News.

Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The feature will connect Teams with certified third-party providers that check meeting media for signs of manipulation. Microsoft lists the update as in development, with rollout scheduled to begin in November 2026. According to the Microsoft 365 roadmap […]

The post Microsoft Teams Adds Synthetic Audio and Video Detection to Fight Deepfake Meeting Attacks appeared first on Cyber Security News.

DarkSword operators are using Coruna malware to steal cryptocurrency wallet recovery phrases from iPhones, turning browser exploits into a ready-to-use theft service. Exposed server directories revealed wallet modules, command systems, and records of stolen data, giving researchers a closer look at how the platform works beyond its initial exploit chain. A copy of one production […]

The post DarkSword iOS Exploit Platform Uses Coruna Malware to Steal Crypto Wallet Recovery Phrases appeared first on Cyber Security News.