Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

The Hacker News - Sep 22, 2026

Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest sensitive data. The package, named "tw-pkgprobe-7731," was first uploaded to the npm registry in mid-August 2026 by an npm account named "twdepprobe7731."

Read full article

More News

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers

WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On some...

Sep 22, 2026See more

5 things to know about Trump’s speech to the United Nations

5 things to know about Trump’s speech to the United Nations

President Trump used the United Nations podium to issue an ultimatum to Iran on Tuesday: Pursue a deal to settle the war, or risk annihilation. The president used a large...

Sep 22, 2026See more

Trump failing to block China’s access to American AI technology, say senior Senate Democrats

Trump failing to block China’s access to American AI technology, say senior Senate Democrats

A group of Senate Democrats on Tuesday said President Trump is failing to block China from accessing sensitive American technology to accelerate its development of artificial intelligence, ahead of the...

Sep 22, 2026See more

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises

Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out...

Sep 22, 2026See more

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials

A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with...

Sep 22, 2026See more

The Big Threat Has Been Climate Change. Now Comes A.I.

The Big Threat Has Been Climate Change. Now Comes A.I.

Both are human-caused, both are frightening, and one of them has raced to the forefront of the global conversation.

Sep 22, 2026See more

Sea turtle laying eggs at Huntington Beach is first known instance of nesting on West Coast

Sea turtle laying eggs at Huntington Beach is first known instance of nesting on West Coast

At least one olive ridley sea turtle has laid its eggs on the sand in Huntington Beach.

Sep 22, 2026See more

73 percent say AI firms not doing enough to prevent disaster: Survey

73 percent say AI firms not doing enough to prevent disaster: Survey

Nearly three-quarters of Americans are worried that artificial intelligence companies have not done enough to prevent the technology from causing serious harm, according to a new survey released Tuesday. The...

Sep 22, 2026See more

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates

A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster, has no...

Sep 22, 2026See more

What are Flock cameras, other ALPRs looking for?

What are Flock cameras, other ALPRs looking for?

You may have noticed more ALPRs around you. Here's what they're looking for.

Sep 22, 2026See more

Trump says AI will be renamed 'super intelligence' in all US documents

Trump says AI will be renamed 'super intelligence' in all US documents

President Trump told the United Nations General Assembly on Tuesday that artificial intelligence will be renamed “super intelligence” in all U.S. documents. “The United States also totally rejects any...

Sep 22, 2026See more

Recommended