What is Identity Dark Matter?
Jan 06, 2026The Hacker NewsSaaS Security / Enterprise Security The Invisible Half of the Identity Universe Identity used to live in one place – an LDAP directory, an HR system, a single IAM portal. Not…
VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX
Jan 06, 2026Ravie LakshmananThreat Intelligence / Cloud Security Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are…
New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands
Jan 06, 2026Ravie LakshmananVulnerability / DevOps A new critical security vulnerability has been disclosed in n8n, an open-source workflow automation platform, that could enable an authenticated attacker to execute arbitrary system commands on the underlying…
Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers
Jan 06, 2026Ravie LakshmananVulnerability / Web Security Users of the “@adonisjs/bodyparser” npm package are being advised to update to the latest version following the disclosure of a critical security vulnerability that, if successfully exploited, could…
The nation’s strictest privacy law just took effect, to data brokers’ chagrin
Californians are getting a new, supercharged way to stop data brokers from hoarding and selling their personal information, as a recently enacted law that’s among the strictest in the nation took effect at the beginning…
Honor’s new Power 2 is an iPhone 17 Pro Max for Android fans
Okay, we’ll admit, “Chinese Android phone copies Apple” isn’t all that surprising of a headline. Apple’s designs and interfaces have been the subject of much adoration overseas, and there is no shortage of knock-off devices…
Hacktivist deletes white supremacist websites live on stage during hacker conference
A hacktivist remotely wiped three white supremacist websites live on stage during their talk at a hacker conference last week, with the sites yet to return online. The pseudonymous hacker, who goes by Martha Root…
Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government
Jan 05, 2026Ravie LakshmananCyber Espionage / Windows Security The Russia-aligned threat actor known as UAC-0184 has been observed targeting Ukrainian military and government entities by leveraging the Viber messaging platform to deliver malicious ZIP archives.…
8BitDo’s FlipPad brings a funky GameBoy-style gamepad to your iPhone
8BitDo has announced the FlipPad, a USB-C game controller that plugs into the USB-C port of an iPhone (and Android phones). The controller provides a directional pad and face buttons (ABXY), as well as buttons…
Kimwolf Android Botnet Infects Over 2 Million Devices via Exposed ADB and Proxy Networks
Jan 05, 2026Ravie LakshmananIoT Security / Mobile Security The botnet known as Kimwolf has infected more than 2 million Android devices by tunneling through residential proxy networks, according to findings from Synthient. “Key actors involved…