Coder has reported a significant software supply chain incident in which an unidentified threat actor redirected part of its official module registry traffic to attacker-controlled infrastructure. This led to the temporary distribution of tampered Terraform modules intended to steal credentials. The incident affected the registry at registry.coder.com on August 31, 2026, between 07:35 UTC and […]

The post Hackers Hijack Coder Module Registry to Distribute Credential-Stealing Malicious Packages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A known Shai-Hulud npm worm payload has resurfaced after 111 days of inactivity, raising fresh questions about the effectiveness of registry-level malware screening. The May campaign demonstrated how quickly a single compromised maintainer account can turn into a software supply-chain incident. Attackers pushed malicious versions across npm packages, including widely used visualization and frontend dependencies. […]

The post Known npm Worm Returns After 111 Days and Security Scanning Still Let It Through appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have unveiled InjectEave, an electromagnetic side-channel attack that can turn ordinary headphones into unintended transmitters. By directing radio-frequency energy at vulnerable hardware and collecting the resulting emissions, an attacker can reconstruct audio playing through a target device. In a long-range experiment using amplified equipment, researchers successfully recovered audible speech from wireless headphones at […]

The post New InjectEave Attack Lets Hackers Eavesdrop on Headphone Audio From 30 Meters Away appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.