The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
Cyber Daily

Scammers now imitate hold music and more in evolving tactics says AFP, CBA

Australians are being targeted by evolving and changing scam techniques which are being used to steal crypto and cash, ...
Tax Guru

CBDT Notifies Sovereign Wealth Fund Tax Exemption Rules & Procedure

The circular introduces mandatory Form I and Form II for SWFs to claim tax exemptions. The ruling ensures structured ...
Security Boulevard

Fuzzing to Zero-Day: Pwning V8CTF With TurboFan Type Confusion, CVE-2025-2135

The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...

SSM Health Dean sues orthopedic surgeons leaving to start competing practice

SSM Health Dean was a planning an orthopedics ambulatory surgery center, which the new group says it will now build, along ...