A known Shai-Hulud npm worm payload has resurfaced after 111 days of inactivity, raising fresh questions about the effectiveness of registry-level malware screening. The May campaign demonstrated how quickly a single compromised maintainer account can turn into a software supply-chain incident. Attackers pushed malicious versions across npm packages, including widely used visualization and frontend dependencies. […]

The post Known npm Worm Returns After 111 Days and Security Scanning Still Let It Through appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have unveiled InjectEave, an electromagnetic side-channel attack that can turn ordinary headphones into unintended transmitters. By directing radio-frequency energy at vulnerable hardware and collecting the resulting emissions, an attacker can reconstruct audio playing through a target device. In a long-range experiment using amplified equipment, researchers successfully recovered audible speech from wireless headphones at […]

The post New InjectEave Attack Lets Hackers Eavesdrop on Headphone Audio From 30 Meters Away appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.