GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
InfoWorld

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

KB5081339: Microsoft improves Windows 11 File Explorer, Context Menu in build 28020.1743

Microsoft has released two new Canary builds, 28020.1743 under KB5081339, and 29553.1000, for Windows 11 Insiders with ...
Forbes

Rich And Powerful In The New Epstein Files: Steve Tisch Transfers His NY Giants Ownership

The Justice Department’s Jan. 30 release of documents related to Jeffrey Epstein shows new ties with the world’s most powerful people, including information about his relationship to Richard Branson, ...
The New York Times

U.S. Says It Struck 16 Iranian Mine-Laying Vessels Near Oil Route

Whether any mines had been laid in the Strait of Hormuz since the war began on Feb. 28 is unclear. The Pentagon said 140 American service members had been wounded, eight severely, in the war.
The New York Times

After Global Economy Shudders, Trump Zigzags on Whether War Is Nearing End

The president told reporters at a news conference in Florida that the fighting is “going to be ended soon” but added that the U.S. would strike Iran harder if needed. Crowds gathered at Enghelab ...
WinBuzzer

GitHub: Glassworm Hides Malware in Invisible Unicode Across 151+ Repos

The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that ...