keyv@600

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

AndyC 5 August 2026

A credential-stealing npm worm that first appeared in keyv@6.0.0 spread beyond the Keyv and Cacheable namespaces into hundreds of packages...

Protecting legacy OT systems against modern cyberthreats

AndyC 18 June 2026

Critical Infrastructure Many manufacturing plants depend on OT systems that stay in service for many years. That long run can hide significant cybersecurity risks. Tomáš...

Lessons for life: Why children’s data is a long-term identity risk

AndyC 8 June 2026

Kids Online Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe. Phil...

This month in security with Tony Anscombe – May 2026 edition

AndyC 2 June 2026

In this roundup, Tony looks at attacks against Polish water treatment facilities, how AI-directed attacks failed in Mexico, and what Google believes is the first...

ESET APT Activity Report Q4 2025–Q1 2026

AndyC 2 June 2026

ESET ResearchThreat Reports An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 Jean-Ian...

What to consider before asking an AI chatbot for health advice

AndyC 2 June 2026

Using chatbots for medical advice could elicit hallucinations and even expose you to security and privacy risks. Here’s what’s at stake and how to stay...

BTMOB: A stealthy RAT burrowing deep into Android devices

AndyC 27 May 2026

The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise Daniel Cunha Barbosa 26 May 2026 • ,...