This constant stream of malicious VSCode extensions won't end anytime soon.... This batch hid its payload, a Rust-based trojan, as PNG files inside the dependencies folder

ReversingLabs

VS Code extensions contain trojan-laden fake image | ReversingLabs

RL researchers have identified 19 malicious extensions on the VS Code Marketplace — the majority containing a malicious file posing as a PNG.

A popular reverse proxy and ingress controller shipped misconfigured versions for the past five months. The Traefik setting that enabled TLS verification was actually disabling it across the board.

AISLE

CVE-2025-66491: Traefik's "Verify=On" Turned TLS Off

Learn how CVE-2025-66491 exposed a critical TLS verification flaw in Traefik, where "Verify=On" accidentally disabled security for 5 months.

Pffff... the Coupang insider, who allegedly stole the company's data, was apparently a cybersecurity employee

Alleged Coupang data leaker had only worked at company for two years, say police

The former Coupang employee accused of leaking 33.7 million customer data had worked at the company for just two years, according to police on Thur...

Security firm Flare has scanned the Docker Hub portal and found secrets and tokens, including for production systems, in more than 10,000 images

Flare | Threat Exposure Management | Unmatched Visibility into Cybercrime

Thousands of Exposed Secrets Found on Docker Hub - Flare

In a month, we found Docker Hub images that contained leaked secrets (including live credentials to production systems) from over 100 companies.