Cybernews

Hundreds of code repos falling like dominoes, infected by new wave of self-replicating malware

A massive, self-replicating GlassWorm supply-chain attack has compromised hundreds of code repositories and extensions on GitHub, npm, and Open VSX.

Sovereign Metals boosts Kasiya resource ahead of DFS, reinforcing global rutile scale

Sovereign Metals Ltd (ASX:SVM, OTCQX:SVMLF, AIM:SVML, FRA:SVM) has delivered a substantial upgrade to the mineral resource at its flagship Kasiya rutile-graphite project in Malawi, strengthening ...

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

This open-source app turns Microsoft's GitHub into an app store for your Android phone — and your Windows PC, too

GitHub has a ton of amazing projects within, and this app helps you find interesting ones you might want to use on your ...

New York transit officials sue Trump administration to restore subway project funding

The transit agency in charge of New York City’s subway system has sued the Trump administration. It's claiming breach of contract after the administration withheld almost $60 million in ...
Visual Studio Magazine

Going Local (& a Bit Loco) with Open-Source AI in VS Code

This hands-on PoC shows how I got an open-source model running locally in Visual Studio Code, where the setup worked, where it broke down, and what to watch out for if you want to apply a local model ...
Pure Xbox

With Project Helix On The Horizon, Xbox Is Now Letting You Add Games Manually On PC

We've heard a lot this month about Xbox's new Project Helix console and how it'll support both console and PC games, and the belief is that it'll work similarly to how the ROG Xbox Ally handheld ...
WinBuzzer

GitHub: Glassworm Hides Malware in Invisible Unicode Across 151+ Repos

The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that ...
InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...
Tom's Hardware on MSN

Invisible malicious code attacks 151 GitHub repos and VS Code

The technique exploits Unicode Private Use Area characters, which render as zero-width whitespace in virtually every code ...

Iowa bars local gender identity protections after rolling back its civil rights code

Iowa has barred cities and counties from adding local protections for gender identity. The move comes after the state became the first to rollback those protections last year. The preemption law ...