Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain
Ravie LakshmananApr 22, 2026Cloud Security / Software Security Cybersecurity researchers have warned of malicious images pushed to the official "checkmarx/kics"...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens
Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating...
Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
Ravie LakshmananApr 22, 2026Cyber Espionage / Malware The threat actor known as Harvester has been attributed to a new Linux...
Vonage, Girls Who Code Show What ‘Responsible AI’ Looks Like
Image: Girls Who Code As AI reshapes software development, cybersecurity, and business technology, the companies that stand out will not...
Mozilla Fixes 271 Firefox Bugs Using Anthropic’s Mythos AI
Image: Visual Generation/Adobe Mozilla announced Tuesday that this week’s release of Firefox 150 ships with patches for 271 security vulnerabilities...
Fake Google Antigravity Installer Can Steal Accounts in Minutes
Image generated from Gemini Nano Banana A fake Google Antigravity download is exposing user accounts to compromise within minutes. What...
Microsoft: Most Windows 11 Users Don’t Need Third-Party Antivirus
Image: Boliviaintelligente You may not need an antivirus on Windows 11… and Microsoft is saying it out loud. Microsoft has...
New Apple Phishing Scam Uses Fake $899 iPhone Purchase Alert
Image: akportfolio24/Envato One fake Apple alert is all it takes to send someone into a tailspin. A new phishing scam...
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is...
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is...
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is...
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is...
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is...
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is...
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is...