Max severity Flowise RCE vulnerability now exploited in attacks

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

North Korea’s hijack of one of the web’s most used open source projects was likely weeks in the making

North Korean hackers pushed out malicious updates to a popular open source project by hacking a top developer's computer in a ...
The Next Web

LinkedIn is secretly scanning your browser for 6,000 extensions, and you weren’t told

LinkedIn runs a hidden JavaScript script called Spectroscopy that silently probes over 6,000 Chrome extensions and collects ...
Pocket Tactics

Divine Duality Elemental codes April 2026

April 7, 2026: We added a new [👁️‍🗨️VOID] Divine Duality Elemental code to our list offering free shards! We also checked existing codes to make sure they still work Make sure you redeem these new ...
Lynnwood Times

Anthropic leaks source code for its AI coding agent Claude

Anthropic accidentally exposed roughly 512,000 lines of proprietary TypeScript source code for its AI-powered coding agent ...
InfoWorld

Local-first browser data gets real

Wasm, PGlite, OPFS, and other new tech bring robust data storage to the browser, Electrobun brings Bun to desktop apps, ...
Wired

What Do Dark Web Monitoring Services Do, and Should You Get One?

Data breaches have become a fact of our digital world. Verizon’s 2025 Data Breach Investigations Report recorded over 12,000 breaches in that year alone. That’s nearly three dozen a day. And it gets ...
Pocket Tactics

Survive the Apocalypse codes April 2026

April 5, 2026: We added a new [UPD] 🧟 Survive the Apocalypse code to our list for 25 emeralds! We also removed an expired code Base-building games aren't that common on Roblox, so you might be out of ...
Bleeping Computer

AppsFlyer Web SDK hijacked to spread crypto-stealing JavaScript code

The AppsFlyer Web SDK was temporarily hijacked this week with malicious code used to steal cryptocurrency in a supply-chain attack. The payload can intercept cryptocurrency wallet addresses entered on ...
Nature

China intensifies push to become world leader in tech and AI

China is pledging to use ‘extraordinary measures’ to support the country's bid to become a global leader in artificial intelligence, quantum technology and other cutting-edge technological fields, ...
Ars Technica

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...
CoinTelegraph

Sweden probes reported leak of e-government platform source code

Sweden is investigating a reported leak tied to CGI Sverige after hackers claimed they exposed source code from the country’s e-government platform. A threat actor has claimed to have leaked source ...