Do fear the Reaper - stealer swipes macOS users' passwords, wallets, then backdoors them

The updated SHub stealer variant is called Reaper, and it uses macOS Script Editor, pre-populated with the malicious payload ...
Decrypt

Fake OpenAI Repo Hit #1 on Hugging Face—And Stole Passwords While It Trended

A fake repo impersonating the OpenAI Privacy Filter model racked up 244,000 downloads in under 18 hours before Hugging Face ...
InfoWorld

Hands-on with React, Supabase, and PowerSync

If you are building a simple dashboard or a form-based application, the traditional JSON API (REST or GraphQL) approach is ...

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
CSO Online

Expired domain leads to supply chain attack on node-ipc npm package

Attackers performed an email takeover attack on a dormant maintainer account and published new node-ipc versions containing ...
OS X Daily

How to Prevent Chrome Browser from Downloading 4GB of Local AI Model Files

If you’re a Mac user of the Chrome web browser, as many are, you might be interested to know that the latest versions of ...
MIT Technology Review

The Download: deepfake porn’s stolen bodies and AI sharing private numbers

Semitrucks produce an outsized share of road transport pollution, while electric alternatives have struggled with high prices ...
Sky

Image of Trump among documents reposted on Epstein files release after apparent removal

Pictures of Donald Trump were included among at least 16 documents that disappeared from the Epstein files released by the Department of Justice (DOJ). The Democrats from the House Oversight Committee ...