SummarySlowMist uncovered compromised Swarm software releases that exposed Ethereum ecosystem users to potential ...

The PHP Project provides instructions to stop further RCE exploits in limited settings. A flaw in PHP triggered a worldwide scramble to patch vulnerable websites, and now, further instructions have ...

A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, the developer of the open-source AI coding agent that Pillar Security’s ...

The numbers behind the trend are blunt. Sonatype’s 2026 State of the Software Supply Chain report counted more than 454,600 new malicious open-source packages in 2025, pushing the cumulative total it ...

OpenClaw's Control UI trusted a gatewayUrl parameter, leaked the stored gateway token, and gave a malicious link remote code execution. Fixed in 2026.1.29.

APT29-linked attackers use compromised sites and Plerdy analytics to deliver iOS and Android exploits that steal browser and ...

Researchers at Sekoia say a hacking group tied to Russia's SVR ran a watering-hole campaign that infected iOS and Android phones through ...

Hackers from North Korea are notoriously effective at stealing crypto, with one estimate attributing 60% of all losses last ...

How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for ...

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

Explore the latest news, real-world incidents, expert analysis, and trends in cryptocurrency — only on The Hacker News, the leading cybersecurity and IT news platform.

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to worry about this week.