SecurityWeek

‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access

DirtyClone, tracked as CVE-2026-43503, is a Linux kernel vulnerability that allows any local user to gain root privileges.

Exclusive: Chainguard extends Repository scanning and policies to Java, Python and containers

Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...
Infosecurity Magazine

Lookalike npm Package Hides a Multi-Stage Windows RAT

A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...
The Hacker News

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
Microsoft

Crypto Clipper uses Tor and worm-like propagation for persistence and control

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...
Wired

Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps

The new open-source project could serve as the basis for a future of apps with features as complex as Slack, Discord, or Google Docs—but with added protection against surveillance. So one group of ...
techtimes

How Companies Can Prepare for Post‑Quantum Encryption in 2026 Before It’s Too Late

Strengthen quantum security in 2026 with post‑quantum cryptography, post‑quantum encryption, and quantum‑safe migration strategies to protect sensitive data from the emerging quantum threat. Pixabay, ...
AppleInsider

How Apple turned to math to defend against next-gen attacks on encryption

Apple says testing missed flaws in new encryption designed to protect against future attacks from quantum computers, so it turned to mathematical proofs to make sure the code works correctly before ...
9to5Mac

Discord now uses end-to-end encryption for all voice and video calls by default

Discord is now using end-to-end encryption for all voice and video calls across all platforms: desktop, mobile, web and console. It’s been a very long time coming – the company first shared its ...
Engadget

Discord now has end-to-end encryption on all calls

Your calls on Discord are now truly private. The social platform says it's completed its years-long endeavor to apply end-to-end encryption in all voice and video calls. This security is applied to ...
Bleeping Computer

Discord rolls out end-to-end encryption on voice, video calls

Discord announced that all voice and video calls through the communication platform are now protected by default with end-to-end encryption (E2EE). The implementation was completed in March. Extensive ...
BizTech

How Can Public and Private Key Encryption Protect Private Data?

As part of daily operations, small businesses may need to collect or exchange sensitive data that should be protected. It could be a financial transaction, a mailing address or some other personally ...