Malicious PyPI packages give hackers control of Telegram bot servers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for ...
SecurityWeek

Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines

Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.
The Hacker News

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal ...
GitHub

LokeshTech02/IOC_Analyzer_Threat_Intelligence

This repository helps defenders process IOC datasets from TXT and CSV inputs, apply validation and low-false-positive scoring logic, add threat context labels, and produce per-scan JSON, CSV, and HTML ...
The Washington Post

U.S. and intelligence allies issue rare joint warning about China

LONDON — The United States and other nations in the Five Eyes intelligence partnership on Wednesday took the unusual step of issuing a joint warning that China is using LinkedIn and other job ...
qualitysafety.bmj

Use of structured handoff protocols for within-hospital unit transitions: a systematic review from Making Healthcare Safer IV

Background Handoffs are a weak link in the chain of clinical care of inpatients. Within-unit handoffs are increasing in frequency due to changes in duty hours. There are strong rationales for ...