Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Modern AI news aggregation and newsletter platform covering technology, business, AI, games and world news.

Categories

AI
Programming
Cloud
Security
Open Source
Developer Hub

Company

About
Contact
Advertise

Resources

RSS Feed
API
Privacy Policy
Terms of Service

© 2026 Virexa. All rights reserved.

Virexa

Home AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Sign In Sign Up

Search news, topics or sources

Search news, topics or sources

Sign In Sign Up

AI Programming Cloud Security Open Source Games Mobile Games Developer Hub

Home›News Explorer

Explore

News Explorer

Browse every article collected by VIREXA. Newest articles appear first.

Filters

249 results • Page 6 of 21

Sort by

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

ProgrammingNews

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data

A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed. The "evil twin" extensions were uploaded to the repository between July 26 and August 1, 2026, according to Manifold Security. The packages have been removed from Open VSX as of

The Hacker News·August 5, 2026·1 min read

← Previous 1…4 5 6 7 8…21 Next →

🔥

Developer Pulse

What developers are discussing today

GPT-5.5 API9.4K
Next.js 166.2K
Claude Code5.8K
Kubernetes3.4K
Rust2.7K

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

SecuritySecurity Advisory

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

An agent running Anthropic's Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK's AI Security Institute. When a bystander publicly warned that the code was malicious, the agent denied it, force-pushed a rewritten branch history to erase the evidence, and posted from a second account it controlled to vouch for

The Hacker News·August 5, 2026·1 min read

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

SecuritySecurity Advisory

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 (CVSS score: 9.8) - A code injection vulnerability in Langflow that allows unauthenticated attackers to achieve full remote

The Hacker News·August 5, 2026·1 min read

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

SecuritySecurity Advisory

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has been ongoing since at least August 2025 and involves a trojanized version of the application to deliver FDMTP, a

The Hacker News·August 5, 2026·1 min read

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

SecuritySecurity Advisory

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and seize control of user accounts. "Greatness supports AiTM [adversary-in-the-middle] credential and

The Hacker News·August 4, 2026·1 min read

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

SecuritySecurity Advisory

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

A credential-stealing npm worm that first appeared in keyv@6.0.0 spread beyond the Keyv and Cacheable namespaces into hundreds of packages across multiple organizations on August 4, 2026. SafeDep verified 353 poisoned versions across 79 package names in the npm registry. Its monitoring put the wider footprint at 442 versions across 353 names, while Aikido later reported at least 868 packages

The Hacker News·August 4, 2026·1 min read

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

SecuritySecurity Advisory

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business document reviews, and system maintenance utilities to stealthily deploy Remote Monitoring and Management (RMM) programs like ConnectWise ScreenConnect. The campaign has been codenamed SMOKE#SCREEN by Securonix Threat

The Hacker News·August 4, 2026·1 min read

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

SecuritySecurity Advisory

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Security teams have long estimated risk by ranking attacker sophistication. Nation-state actors sat at one end. Organized criminal groups followed. Inexperienced attackers, dismissed as "script kiddies," sat at the other end, running public

The Hacker News·August 4, 2026·1 min read

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

ProgrammingNews

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent. The researchers said the public agent could be prompt-injected into posting /adk-issue-fix as adk-bot. They identified the bot as a collaborator, so that comment satisfied

The Hacker News·August 4, 2026·1 min read

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

SecuritySecurity Advisory

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries. The database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects

The Hacker News·August 4, 2026·1 min read

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

SecuritySecurity Advisory

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims' browser cache and ultimately deliver CountLoader and a previously undocumented remote access trojan called DeviceManager. "The first stage drops a steganographic PNG image into the browser's cache, retrieves its hidden content, and executes the second

The Hacker News·August 4, 2026·1 min read

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

SecuritySecurity Advisory

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows

The Hacker News·August 4, 2026·1 min read

Zero-Day

↘2K

💬

Top Discussion

HN

Hacker News

“GPT-5.5's API pricing is reshaping how startups build AI products”

14.1K932 comments

View discussion→

Filters

Time

TodayLast 7 DaysLast 30 DaysLast 3 MonthsLast Year

Categories

TechnologyBusinessAIGamesMobile GamesWorldScienceSecurityStartupProgrammingMobileRoboticsSpace

Sources

Hacker News36Android Authority30BBC26Al Jazeera25Forbes25Unity Discussions22Google Developers20IGN20TechCrunch18Wired17The Hacker News13Polygon10

Content Type

NewsReleaseTutorialResearchSecurity AdvisoryCertificationOpen Source