👀

The Hacker News

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Trojanized npm packages launch RedC2 4.0 on Linux at import time, giving operators shell access, credential theft, and payload execution.

Now, that is a bug....

The Hacker News

Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot

BTR Reforged uses Defender's signed BTR.sys with an administrator account and SeLoadDriverPrivilege for kernel file and registry operations.

📰 "The AI Enterprise Revolution" by NM team AI agents that don't need bot tokens, don't rely on centralized platforms, and can move their history and reputation across any Nostr-compatible system. Enterprise software will never be the same. Every few years, a shift happens in how we think about software infrastructure. I remember when the cloud was a radical idea. Then APIs. Then microservices. What's happening with Nostr and AI agents right now feels like one of those moments. Read:

NostrMag

👀

👀 View quoted note →

Was wondering when this will happen, good timing, so much going on, nobody will pay attention... View quoted note →

Balanced, I am enjoying the articles of this magazine, better than expected 👍 View quoted note →

👀 View quoted note →

👀 Cake Wallet has announced the integration of Bitcoin’s Lightning Network into its advanced privacy wallet.

👀 View quoted note →

Malicious Google Chrome extensions have stolen large language model (LLM) conversations and browser data from hundreds of thousands of users. Application security vendor Ox Security detailed a campaign in a recent research blog involving malicious Google Chrome extensions posing as legitimate extensions from a company called AItopia that adds a sidebar on websites that enables chats with popular LLMs like ChatGPT and DeepSeek. Ox researchers found that two extensions were copying the functionality of the legitimate app while also exfiltrating user conversation and browsing data to a command-and-control (C2) server. One, titled "ChatGPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI," had more than 600,000 users and a Google Chrome "Featured" badge, while the other, "AI Sidebar with Deepseek, ChatGPT, Claude and more," had over 300,000. Stay alert, the extensions according to 0x Security have been already removed, I would not be surprised if new ones are already in the store...

👀 View quoted note →

"You'd have to be braindead to believe WhatsApp is secure in 2026. When we analyzed how WhatsApp implemented its "encryption," we found multiple attack vectors" -- Pavel Durov, co-founder of the Telegram messenger. #WhatsApp

Make this viral! View quoted note →

4 in 5 small businesses had cyberscams last year, almost half were AI powered... https://databreaches.net/2026/01/18/4-in-5-small-businesses-had-cyberscams-last-year-almost-half-were-ai-powered/?pk_campaign=feed&pk_kwd=4-in-5-small-businesses-had-cyberscams-last-year-almost-half-were-ai-powered

Stay alert!

The Hacker News

Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts

Five fake Chrome extensions impersonate Workday and NetSuite to steal cookies, block admin controls, and hijack sessions for account takeover.