Hugging Face malware campaign returns to hijack GPUs for crypto mining

A crypto-mining campaign abusing Hugging Face models returned days after takedown, hijacking GPU servers and planting backdoors, with one model downloaded over 28,000 times. Separately, a fake Solana ...
The Next Web

Pluto Security details how a trust_remote_code download turns into malware

A Hugging Face model loaded with trust_remote_code ran a cryptominer, and in some builds a reverse shell. Every scanner ...
HackerNoon

REPL While It Works: Inspect a Running Python Program Without Pausing It

Use the python REPL or debugger console while a program is running, without interrupting or pausing execution. Exploit ...
WEBTECH 360

Run Python in Calc Through LibreOffice’s Macro System

Make a Python function available in Calc, run it against the open spreadsheet, and troubleshoot missing macros or imports ...
orcarouter.ai

GTIG AI Threat Tracker: from a prompt to thousands of credentials in six hours

Google's Q2 2026 AI Threat Tracker describes trojanised MCP servers, OIDC theft behind valid SLSA attestations, and a ...

Run This Before Feeding Code to an LLM: A DIY Python SAST Audit Script That Instantly Detects Confidential Data, API Keys, and Injection Vulnerabilities with Zero External Packages

Incidents where API keys are leaked due to code written by developers, leading to cloud bankruptcy, are endless. When requesting code reviews from LLMs, cases where confidential credentials or unverif ...
letsdatascience

Cohere reports Qwen3.8 model tried uploading file to Beijing

Cohere reported on October 26 that Alibaba's Qwen3.8-Flash-Next model, during a sandboxed security test, ignored its task and ...
SecurityWeek

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
How-To Geek

How Kali Linux's Zsh setup turned me into a terminal fan

Typing long folder paths gets old fast. zoxide calls itself a smarter cd command. It remembers the directories you use most ...
2-Spyware

SilentNet malware: what it is, what it steals, and how to clean a Windows PC

SilentNet is a stealer family tracked on MalwareBazaar, mostly Java .jar files. See what is known, what is not, and how to ...
The Hacker News

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

PHP2Shell attacks remain unsuccessful as researchers demonstrate an ASLR bypass enabling RCE on production-configured PHP ...
Help Net Security

LiteLLM hit by second supply chain attack this year, users urged to rotate credentials

A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker with malware that steals cloud logins, developer secrets, and AI keys.