Every Node.js project accumulates vulnerable dependencies. The npm registry holds over 2.5 million packages, and researchers found 454,000 malicious or vulnerable packages uploaded in 2025 alone.

CISA KEV added GPUStack, FreeSWITCH, OpenSSH and IBM Aspera Faspex flaws on Nov. 9. See affected versions, fixes and the Nov.

Both private actors and also state actors, like Russia or North Korea, are breaking into systems all over thanks to AI helping them both detect and exploit vulnerabilities all at the same time. It's ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Node upgrade broke your app? Fixes for NODE_MODULE_VERSION errors, missing _stream_readable, writeHeader, removed flags and ...

The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.

Ethereum's Lighthouse urged all beacon node operators to install a high-priority security patch ahead of a planned vulnerability disclosure.

SSH in Shambles, Santa steals your podcast setup, SAP’s double feature, Terminal2Shell is CVSS 11, Dormant neurons, active ...

Interchangeable encrypted reasoning blocks let attackers decode hidden chain-of-thought and leak PII and credentials from major LLM APIs.

Darktrace Signal Labs demonstrates how Claude Code memory stores can be abused as a covert command-and-control channel, revealing a new AI-era living-off-the-land technique and the detection ...

Explore the latest news, real-world incidents, expert analysis, and trends in cryptocurrency — only on The Hacker News, the leading cybersecurity and IT news platform.