Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More

Ravie LakshmananMay 11, 2026Cybersecurity / Hacking Rough Monday. Somebody poisoned a trusted download again, somebody else turned cloud servers into public housing, and a few crews are still getting into boxes with bugs that should’ve died years ago — the same old holes, same lazy access paths, same “how the hell is this still open” […]

Venmo’s biggest transformation in years comes at a very interesting time

Venmo is rolling out a major redesign over the next few months that aims to make the app more useful, social, and easier to navigate. This is the peer-to-peer payment app’s biggest shake-up since 2021. The timing is notable. PayPal, which owns Venmo, is undergoing a reorganization to spin off Venmo as a separate business […]

Your purple team is not purple – just red and blue in the same room

The network defense at 2:00 a.m. looks like this: The analyst copies the hash from the PDF and pastes it into the SIEM query. The red team’s script has been manually rewritten for use by the blue team. The patch is awaiting a change approval period that is longer than the exploitation period itself. There […]

Fake OpenAI privacy filter repository hits #1 spot with ‘hug face’, attracts 244,000 downloads

Ravi LakshmananMay 11, 2026Supply chain attack/threat intelligence The malicious Hugging Face repository made its way onto the platform’s trending list by impersonating OpenAI’s privacy filter’s openweight model and delivering a Rust-based information stealer to Windows users. The project, named Open-OSS/privacy-filter, pretended to be the legitimate version released by OpenAI late last month (openai/privacy-filter) and copied […]

How to Test a Salesforce Experience Site Like an Apex Predator

As the foremost CRM solution, Salesforce is often considered the preeminent SaaS platform. It is used by companies from small start-ups to major corporations. And many of those companies use Salesforce Experience Cloud to run native sites – that run on their Salesforce and are deeply integrated with it. Those web apps are powerful and […]

OAuth and MCP investigation checklist

OAuth permissions are the silent back door of modern SaaS, and with the rise of remote MCP servers, that back door is only getting wider. Every time an employee clicks “Sign in with Google” or connects an AI agent to a new MCP server, another vendor obtains the key to the data, often without IT […]

Antropic claims AI’s ‘evil’ portrayal was the cause of Claude’s blackmail attempt

According to Anthropic, fictional depictions of artificial intelligence can have real-world effects on AI models. The company announced last year that during pre-release testing involving fictitious companies, Claude Opus 4 often attempted to blackmail engineers to avoid being replaced with another system. Anthropic later published research suggesting that other companies’ models had similar issues with […]

Uber has always wanted to be more than just rides. I have a reason to hurry now

For years, Uber has been talking about becoming a super app. Then Waymo started picking up passengers in San Francisco, and the conversation became more urgent. The company is trying to embed itself in the AV industry as a data provider, investor and distribution platform, but its consumer bets may be just as important. Two […]