Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 2 most recent headlines Filtered view

Cybersecurity researchers have disclosed details of a new malicious package on the npm repository that works as a fully functional WhatsApp API, but also contains the ability to intercept every message and link the attacker's device to a victim's WhatsApp account

More from The Hacker News 23 Dec 2025, 5:28 a.m. API Artificial Intelligence Disclosure Facebook Node.js Research Victims
Bank Info Security 9 months, 2 weeks ago

MCP Developer Executes Sneaky Heel Turn by Copying Emails

Backdoored NPM Module Sent Sensitive Mail Copies to Threat ActorA patient hacker hooked victims by building a reliable tool integrated into hundreds of developer workflows that connects artificial intelligence agents with an email platform. The unidentified software engineer published 15 "flawless" versions until he slipped in code copying users' emails.

More from Bank Info Security 1 Oct 2025, 7:30 a.m. Artificial Intelligence Email Node.js Threat Actor Victims