Welcome to the inaugural edition of Kernel Panic! A weekly newsletter by Lily Hay Newman and Matt Burgess from inside the new world of privacy and digital security. To receive this newsletter in your inbox each week, sign up here.… Read More "Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening"
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Ravie LakshmananOct 07, 2026Supply Chain / Malware Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK… Read More "Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer"
Black Hat USA 2026: Will vulnerability discovery decline in the AI era?
And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer? 13 Aug 2026 • , 3 min. read The accelerated discovery of previously unknown software vulnerabilities has been making headlines for months. It’s an issue that has… Read More "Black Hat USA 2026: Will vulnerability discovery decline in the AI era?"
Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign
Attackers have abused npm trusted publishing in a supply chain attack that shipped a previously unreported loader, GHAPPIER, in a legitimate package whose malicious release carried valid provenance. In a report published on September 20, CloudSEK said someone used the… Read More "Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign"
US and China Discuss Alerting Each Other to AI National Security Threats
Talks have begun between US and Chinese officials to propose a mechanism for the two countries to notify each other of artificial intelligence incidents which could threaten national security. The framework, called the US China AI Dialogue, would also see… Read More "US and China Discuss Alerting Each Other to AI National Security Threats"
Advantest Discloses Data Breach Months After Ransomware Attack
Japanese chip testing giant Advantest is informing individuals that hackers stole personal information in the ransomware attack disclosed in February 2026. Advantest, which makes automatic test equipment for chipmakers such as Intel and Samsung, said in February that hackers had… Read More "Advantest Discloses Data Breach Months After Ransomware Attack"
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
Swati KhandelwalOct 07, 2026Vulnerability / Artificial Intelligence A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed… Read More "Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely"
How QR-code phishing can slip past corporate security measures
Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap. 17 Aug 2026 • , 5 min. read Familiarity might breed contempt. But in the world of cybersecurity, it also breeds complacency, which can… Read More "How QR-code phishing can slip past corporate security measures"
New Exvicy ClickFix Framework Built on Rival ErrTraffic’s Code
A new ClickFix malware-as-a-service (MaaS) framework called Exvicy has been built on code lifted from a rival service, ErrTraffic. According to a technical write-up published by Sekoia’s Threat Detection & Research team on September 21, telemetry from multiple customer environments… Read More "New Exvicy ClickFix Framework Built on Rival ErrTraffic’s Code"
The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos
An under-the-radar procurement program led by the Department of Defense has been granting special statuses to would-be defense contractors that make it easier for the government to quickly purchase their AI offerings, based on product videos that must be no… Read More "The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos"