Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Web Development: Vite 8.1 to accelerate large applications

Vite 8.1. The new release brings the experimental Bundled Dev Mode, which aims for performance improvements. Furthermore, the ...
Infosecurity Magazine

Lookalike npm Package Hides a Multi-Stage Windows RAT

A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...
The Hacker News

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
latesthackingnews.com

CVE-2026-48907: How the Joomla JCE Exploit Works and What to Do About It

CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request.
Wall Street Journal

China Is Propping Up the World Economy by Importing a Lot Less Oil

A sharp fall in China’s crude oil imports during the Iran war has been instrumental in holding down oil prices and keeping the global economy humming. Clues are emerging in the mystery of the missing ...